From 162113676a894a1ec3ce463600571c4eb309b930 Mon Sep 17 00:00:00 2001
From: Daniel Stenberg <daniel@haxx.se>
Date: Wed, 24 Jan 2024 13:15:18 +0100
Subject: [PATCH] urlapi: remove assert

This assert triggers wrongly when CURLU_GUESS_SCHEME and
CURLU_NO_AUTHORITY are both set and the URL is a single path.

I think this assert has played out its role. It was introduced in a
rather big refactor.

Follow-up to 4cfa5bcc9a

Reported-by: promptfuzz_ on hackerone
Closes #12775
---
 lib/urlapi.c | 1 -
 1 file changed, 1 deletion(-)

diff --git a/lib/urlapi.c b/lib/urlapi.c
index b9ea68eac5..3cd0362c51 100644
--- a/lib/urlapi.c
+++ b/lib/urlapi.c
@@ -1264,7 +1264,6 @@ static CURLUcode parseurl(const char *url, CURLU *u, unsigned int flags)
     pathlen -= fraglen;
   }
 
-  DEBUGASSERT(pathlen < urllen);
   query = memchr(path, '?', pathlen);
   if(query) {
     size_t qlen = fragment ? (size_t)(fragment - query) :
-- 
2.47.3