Change #272058
| Category | None |
| Changed by | Daniel Stenberg <daniel@haxx.se> |
| Changed at | Mon 22 Jun 2026 09:53:14 |
| Repository | https://api.github.com/repos/curl/curl |
| Project | curl/curl |
| Branch | master |
| Revision | ab779d4e4a30506acc9221ce4fdbd7c4a250d2ad |
Comments
doh: stricter HTTPS RNAME parsing If any sublabel is longer than 63 octets, abort. This then also catches compression attempts. Verified in test 1658 Reported-by: netspacer.research Closes #22124
Changed files
- lib/doh.c
- lib/httpsrr.h
- tests/unit/unit1658.c