steps
Curl_failf does: if(data->set.verbose || data->set.errorbuffer)
There is a call path to pass NULL data to it:
Curl_socketpair -> Curl_rand(NULL) -> Curl_rand_bytes(NULL) -> randit(NULL) -> Curl_ssl_random(NULL) -> mbedtls_random(NULL) -> failf(NULL)
(if anything error happens in mbedtls_random)
curl/libcurl version
many versions including master branch
steps
Curl_failfdoes:if(data->set.verbose || data->set.errorbuffer)There is a call path to pass NULL data to it:
Curl_socketpair -> Curl_rand(NULL) -> Curl_rand_bytes(NULL) -> randit(NULL) -> Curl_ssl_random(NULL) -> mbedtls_random(NULL) -> failf(NULL)
(if anything error happens in
mbedtls_random)curl/libcurl version
many versions including master branch