]> git.ipfire.org Git - thirdparty/curl.git/commit
projects / thirdparty / curl.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 164ee10) | patch
urlparse: accept '#' as end of host name
authorDaniel Stenberg <daniel@haxx.se>
Mon, 10 Oct 2016 22:48:35 +0000 (00:48 +0200)
committerDaniel Stenberg <daniel@haxx.se>
Mon, 31 Oct 2016 07:46:35 +0000 (08:46 +0100)
commit3bb273db7e40ebc284cff45f3ce3f0475c8339c2
tree699d2f7d9ec71ffcfc13eb42424c1aab90edd4aatree | snapshot
parent164ee10b0b734b350f05114b78327d6985b880cccommit | diff
urlparse: accept '#' as end of host name

'http://example.com#@127.0.0.1/x.txt' equals a request to example.com
for the '/' document with the rest of the URL being a fragment.

CVE-2016-8624

Bug: https://curl.haxx.se/docs/adv_20161102J.html
Reported-by: Fernando Muñoz
lib/url.c diff | blob | blame | history
Mirror of https://github.com/curl/curl.git