> Then I found that it is this part of readwrite_upload() which limits the > exposure of this bug:
I forgot to add, this piece of code actually also _introduced_ the bug. Because before that, further reads were made only to an empty buffer. https://github.com/curl/curl/commit/7f43f3dc5994d01b12eb1dfe2ebf5e8371b4e32b So it seems like a regression since 7.84.0 only (June 2022). -- Unsubscribe: https://lists.haxx.se/mailman/listinfo/curl-library Etiquette: https://curl.se/mail/etiquette.html