projects / curl.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 44ee5b3) | patch
[PATCH] hostcheck: fix host name wildcard checking
authorDaniel Stenberg <daniel@haxx.se>
Mon, 24 Apr 2023 19:07:02 +0000 (21:07 +0200)
committerGuilherme Puida Moreira <guilherme@puida.xyz>
Tue, 2 Apr 2024 23:02:10 +0000 (20:02 -0300)
commitc15fa414c9ff01f16bfa9c7048025da9224f9d14
tree327576d4e090c207f8215d1b2542f6111c91476btree | snapshot
parent44ee5b3d7b5f8eec601cfe30e869322704034011commit | diff
[PATCH] hostcheck: fix host name wildcard checking

The leftmost "label" of the host name can now only match against single
'*'. Like the browsers have worked for a long time.

- extended unit test 1397 for this
- move some SOURCE variables from unit/Makefile.am to unit/Makefile.inc

Reported-by: Hiroki Kurosawa
Closes #11018

Backported to Debian by Samuel Henrique <samueloph@debian.org>

Gbp-Pq: Name CVE-2023-28321.patch
lib/vtls/hostcheck.c diff | blob | history
tests/data/test1397 diff | blob | history
tests/unit/unit1397.c diff | blob | history
Unnamed repository; edit this file 'description' to name the repository.