urlapi: skip appending NULL pointer query

Reported-by: kirbyn17 on hackerone Closes #12240
2023-10-31 16:22:07 +01:00 · 2023-10-31 16:22:07 +01:00 · ffbc9981c4
commit ffbc9981c4
parent 21c5d5971e
1 changed files with 1 additions and 1 deletions
--- a/lib/urlapi.c
+++ b/lib/urlapi.c
@ -1902,7 +1902,7 @@ CURLUcode curl_url_set(CURLU *u, CURLUPart what,
    }
    newp = Curl_dyn_ptr(&enc);

-    if(appendquery) {
+    if(appendquery && newp) {
      /* Append the 'newp' string onto the old query. Add a '&' separator if
         none is present at the end of the existing query already */