Skip to content

Conversation

@MegaManSec
Copy link
Contributor

When Curl_timeleft() < 0 we used to return 0, masking the expiry and skipping the caller’s (timeout_ms < 0) path. Now we set FIN and return the negative value so tftp_multi_statemach() aborts with CURLE_OPERATION_TIMEDOUT as intended.

When Curl_timeleft() < 0 we used to return 0, masking the expiry and
skipping the caller’s (timeout_ms < 0) path. Now we set FIN and return
the negative value so tftp_multi_statemach() aborts with
CURLE_OPERATION_TIMEDOUT as intended.
@github-actions github-actions bot added the TFTP label Sep 16, 2025
@MegaManSec
Copy link
Contributor Author

Also related, but I don't want to send a PR for this because I'm uncertain, it looks like there's a missing check of the return value here (e.g. what happens if the timeout is 0?)

@bagder
Copy link
Member

bagder commented Sep 18, 2025

Also related, but I don't want to send a PR for this because I'm uncertain, it looks like there's a missing check of the return value here (e.g. what happens if the timeout is 0?)

Yeah, that looks like another bug to fix!

@bagder
Copy link
Member

bagder commented Sep 18, 2025

Thanks!

bagder added a commit that referenced this pull request Sep 18, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Development

Successfully merging this pull request may close these issues.

2 participants