luo980/curl
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

urlapi: avoid null deref if setting blank host to url encode

Browse Source 
Reported-by: kirbyn17 on hackerone

Closes #12240
This commit is contained in:
Daniel Stenberg 2023-10-31 11:24:13 +01:00
parent 27f2352d49
commit c64d0d67fd
No known key found for this signature in database
GPG Key ID: 5CC908FDB71E12C2
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
lib/urlapi.c
View File

@ -1931,8 +1931,8 @@ nomem:
}
}
if(what == CURLUPART_HOST) {
size_t n = strlen(newp);
else if(what == CURLUPART_HOST) {
size_t n = Curl_dyn_len(&enc);
if(!n && (flags & CURLU_NO_AUTHORITY)) {
/* Skip hostname check, it's allowed to be empty. */
}