From: Daniel Stenberg <daniel@haxx.se>
Date: Tue, 27 Dec 2022 10:50:23 +0000 (+0100)
Subject: hsts: handle adding the same host name again
X-Git-Tag: curl-7_88_0~220
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=ca02a77f05bd5cef20618c8f741aa48b7be0a648;p=thirdparty%2Fcurl.git

hsts: handle adding the same host name again

It will then use the largest expire time of the two entries.
---

diff --git a/lib/hsts.c b/lib/hsts.c
index 339237be1c..8d6723ee58 100644
--- a/lib/hsts.c
+++ b/lib/hsts.c
@@ -426,14 +426,23 @@ static CURLcode hsts_add(struct hsts *h, char *line)
   if(2 == rc) {
     time_t expires = strcmp(date, UNLIMITED) ? Curl_getdate_capped(date) :
       TIME_T_MAX;
-    CURLcode result;
+    CURLcode result = CURLE_OK;
     char *p = host;
     bool subdomain = FALSE;
+    struct stsentry *e;
     if(p[0] == '.') {
       p++;
       subdomain = TRUE;
     }
-    result = hsts_create(h, p, subdomain, expires);
+    /* only add it if not already present */
+    e = Curl_hsts(h, p, subdomain);
+    if(!e)
+      result = hsts_create(h, p, subdomain, expires);
+    else {
+      /* the same host name, use the largest expire time */
+      if(expires > e->expires)
+        e->expires = expires;
+    }
     if(result)
       return result;
   }