From: Daniel Stenberg <daniel@haxx.se>
Date: Mon, 11 Mar 2024 21:39:22 +0000 (+0100)
Subject: tool_getparam: handle non-existing (out of range) short-options
X-Git-Tag: curl-8_7_0~40
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=3ccce37790428382d38c7c28e2aec05b20c31ba5;p=thirdparty%2Fcurl.git

tool_getparam: handle non-existing (out of range) short-options

... correctly, even when they follow an existing one without a space in
between.

Verify with test 467

Follow-up to 07dd60c05b
Reported-by: Geeknik Labs
Fixes #13101
Closes #13102
---

diff --git a/src/tool_getparam.c b/src/tool_getparam.c
index 23fe3106e6..52bb24959d 100644
--- a/src/tool_getparam.c
+++ b/src/tool_getparam.c
@@ -1009,7 +1009,8 @@ static const struct LongShort *single(char letter)
 {
   static const struct LongShort *singles[128 - ' ']; /* ASCII => pointer */
   static bool singles_done = FALSE;
-  DEBUGASSERT((letter < 127) && (letter > ' '));
+  if((letter >= 127) || (letter <= ' '))
+    return NULL;
 
   if(!singles_done) {
     unsigned int j;
diff --git a/tests/data/Makefile.inc b/tests/data/Makefile.inc
index 1a06adf37b..06bc5c54f9 100644
--- a/tests/data/Makefile.inc
+++ b/tests/data/Makefile.inc
@@ -73,7 +73,7 @@ test426 test427 test428 test429 test430 test431 test432 test433 test434 \
 test435 test436 test437 test438 test439 test440 test441 test442 test443 \
 test444 test445 test446 test447 test448 test449 test450 test451 test452 \
 test453 test454 test455 test456 test457 test458 test459 test460 test461 \
-test462 test463 \
+test462 test463 test467 \
 \
 test490 test491 test492 test493 test494 test495 test496 test497 test498 \
 test499 test500 test501 test502 test503 test504 test505 test506 test507 \
diff --git a/tests/data/test467 b/tests/data/test467
new file mode 100644
index 0000000000..4184ac062c
--- /dev/null
+++ b/tests/data/test467
@@ -0,0 +1,31 @@
+<testcase>
+<info>
+<keywords>
+cmdline
+</keywords>
+</info>
+
+#
+# Client-side
+<client>
+<server>
+none
+</server>
+<name>
+use a bad short option letter that does not exist (after one does exist)
+</name>
+
+# the second option is outside the normal accepted range
+<command>
+curl -v http://example.com
+</command>
+</client>
+
+#
+# Verify errorcode
+<verify>
+<errorcode>
+2
+</errorcode>
+</verify>
+</testcase>