]> git.ipfire.org Git - thirdparty/curl.git/commit
cookie: reject cookies with "control bytes"
authorDaniel Stenberg <daniel@haxx.se>
Sun, 28 Aug 2022 22:09:17 +0000 (00:09 +0200)
committerDaniel Stenberg <daniel@haxx.se>
Mon, 29 Aug 2022 09:20:37 +0000 (11:20 +0200)
commit8dfc93e573ca740544a2d79ebb0ed786592c65c3
tree91e5d840613f6171978cd2af7f35a9dac44a9967
parent74e156d00f9f0979a360576ba487f57c35784a14
cookie: reject cookies with "control bytes"

Rejects 0x01 - 0x1f (except 0x09) plus 0x7f

Reported-by: Axel Chong
Bug: https://curl.se/docs/CVE-2022-35252.html

CVE-2022-35252

Closes #9381
lib/cookie.c