curl:curl_fuzzer_smb: Heap-buffer-overflow in to_u32

Project:
https://github.com/curl/curl.git

Detailed Report: https://oss-fuzz.com/testcase?key=5714596706385920

Project: curl
Fuzzing Engine: libFuzzer
Fuzz Target: curl_fuzzer_smb
Job Type: libfuzzer_asan_i386_curl
Platform Id: linux

Crash Type: Heap-buffer-overflow READ 1
Crash Address: 0xf5902f48
Crash State:
to_u32
fuzz_get_tlv_comn
fuzz_add_mime_part

Sanitizer: address (ASAN)

Recommended Security Severity: Medium

Crash Revision: https://oss-fuzz.com/revisions?job=libfuzzer_asan_i386_curl&revision=201908240239

Reproducer Testcase: https://oss-fuzz.com/download?testcase_id=5714596706385920

Issue filed automatically.

See https://google.github.io/oss-fuzz/advanced-topics/reproducing for instructions to reproduce this bug locally.

This bug is subject to a 90 day disclosure deadline. If 90 days elapse
without an upstream patch, then the bug report will automatically
become visible to the public.