]> git.ipfire.org Git - thirdparty/curl.git/commit
projects / thirdparty / curl.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: ffe34b7) | patch
urlapi: verify the IPv6 numerical address
authorDaniel Stenberg <daniel@haxx.se>
Wed, 4 Sep 2019 21:49:30 +0000 (23:49 +0200)
committerDaniel Stenberg <daniel@haxx.se>
Tue, 10 Sep 2019 09:32:12 +0000 (11:32 +0200)
commiteab3c580f955c571253ab0ebd062b5f8c8d2b82f
treea8466faeca6eb03aa0e7707e001afee962b81c7ftree
parentffe34b7b59e842fc37f2d19418dc2d7a5075e7cacommit | diff
urlapi: verify the IPv6 numerical address

It needs to parse correctly. Otherwise it could be tricked into letting
through a-f using host names that libcurl would then resolve. Like
'[ab.be]'.

Reported-by: Thomas Vegas
Closes #4315
lib/urlapi.c diff | blob | blame | history
tests/libtest/lib1560.c diff | blob | blame | history
Mirror of https://github.com/curl/curl.git