http: make Curl_compareheader handle multiple commas in header

For robustness

diff --git a/lib/http.c b/lib/http.c
index a1253be6802844a0fb908b0df5c552e72ad1fbaa..73920cd7488bdc35ead18b050f4d1d6c126bd9ac 100644 (file)
--- a/lib/http.c
+++ b/lib/http.c
@@ -1449,7 +1449,11 @@ bool Curl_compareheader(const char *headerline, /* line to check */
       if(curlx_str_until(&p, &next, MAX_HTTP_RESP_HEADER_SIZE, ',') ||
          curlx_str_single(&p, ','))
         break; /* no comma, get out */
-      curlx_str_passblanks(&p);
+
+      /* if there are more dummy commas, move over them as well */
+      do
+        curlx_str_passblanks(&p);
+      while(!curlx_str_single(&p, ','));
       len -= (p - o);
     }
   }