Change #278825
| Category | curl |
| Changed by | Alhuda Khan <al.hudz.k@gmail.com> |
| Changed at | Fri 21 Aug 2026 00:16:12 |
| Repository | https://github.com/curl/curl.git |
| Project | curl |
| Branch | master |
| Revision | 2ba2fe354026aa4d60ab06fbc9b6ac1e56d1b92f |
Comments
ldap: base64-encode LDIF values beginning with colon or less-than A value whose first byte is ':' or '<' is not a SAFE-INIT-CHAR per RFC 2849 and must be base64-encoded, but ldap_value_needs_base64() and the inline check in oldap_recv() only encoded on a control byte or leading/trailing blank. Such a value was emitted verbatim, producing LDIF that strict parsers reject. Closes #22339
Changed files
- lib/ldap.c
- lib/openldap.c