curl: backport fix for CVE-2019-15601
authorPetr Štetiar <ynezz@true.cz>
Fri, 1 May 2020 08:12:11 +0000 (10:12 +0200)
committerRISCi_ATOM <Bob@bobcall.me>
Thu, 7 May 2020 15:12:10 +0000 (11:12 -0400)
commit64792b9c25bbf78a10bb5cc40c4ff6ecb1440200
tree5fbc6fa4886f308abfc8bd2292003f6365e72223
parentc13b090fac15c4f6e195e79ecbdcfa1a4756941c
curl: backport fix for CVE-2019-15601

On Windows, refuse paths that start with \\ ... as that might cause an
unexpected SMB connection to a given host name.

Ref: PR#2730
Ref: https://curl.haxx.se/docs/CVE-2019-15601.html
Suggested-by: Jerome Benoit <jerome.benoit@sap.com>
Signed-off-by: Petr Štetiar <ynezz@true.cz>
package/network/utils/curl/Makefile
package/network/utils/curl/patches/100-file-on-Windows-refuse-paths-that-start-with.patch [new file with mode: 0644]