Change #272059
| Category | curl |
| Changed by | Daniel Stenberg <daniel@haxx.se> |
| Changed at | Mon 22 Jun 2026 09:53:14 |
| Repository | https://github.com/curl/curl.git |
| Project | curl |
| Branch | master |
| Revision | ab779d4e4a30506acc9221ce4fdbd7c4a250d2ad |
Comments
doh: stricter HTTPS RNAME parsing If any sublabel is longer than 63 octets, abort. This then also catches compression attempts. Verified in test 1658 Reported-by: netspacer.research Closes #22124
Changed files
- lib/doh.c
- lib/httpsrr.h
- tests/unit/unit1658.c