Skip to content
  • Daniel Stenberg's avatar
    CURL_MAX_INPUT_LENGTH: largest acceptable string input size · 5fc28510
    Daniel Stenberg authored
    This limits all accepted input strings passed to libcurl to be less than
    CURL_MAX_INPUT_LENGTH (8000000) bytes, for these API calls:
    curl_easy_setopt() and curl_url_set().
    
    The 8000000 number is arbitrary picked and is meant to detect mistakes
    or abuse, not to limit actual practical use cases. By limiting the
    acceptable string lengths we also reduce the risk of integer overflows
    all over.
    
    NOTE: This does not apply to `CURLOPT_POSTFIELDS`.
    
    Test 1559 verifies.
    
    Closes #3805
    5fc28510