[PATCH] hostcheck: fix host name wildcard checking
authorDaniel Stenberg <daniel@haxx.se>
Mon, 24 Apr 2023 19:07:02 +0000 (21:07 +0200)
committerAquila Macedo Costa <aquilamacedo@riseup.net>
Tue, 17 Sep 2024 19:29:24 +0000 (16:29 -0300)
commit7e140150d7edaf85d394b098ffa658dc07fa799e
tree7a3763e5a76d11b86ce00d2aef8892c36c55c7c1
parent24f1194098cdf67b4af8b09df1db4a842c9f211e
[PATCH] hostcheck: fix host name wildcard checking

The leftmost "label" of the host name can now only match against single
'*'. Like the browsers have worked for a long time.

- extended unit test 1397 for this
- move some SOURCE variables from unit/Makefile.am to unit/Makefile.inc

Reported-by: Hiroki Kurosawa
Closes #11018

Backported to Debian by Samuel Henrique <samueloph@debian.org>

Gbp-Pq: Name CVE-2023-28321.patch
lib/vtls/hostcheck.c
tests/data/test1397
tests/unit/unit1397.c