Change #282759
| Category | curl |
| Changed by | Joshua Rogers <MegaManSec@users.noreply.github.com> |
| Changed at | Tue 22 Sep 2026 23:28:43 |
| Repository | https://github.com/curl/curl.git |
| Project | curl |
| Branch | master |
| Revision | 13e84a694584531038ed3461c038fafd78262e2e |
Comments
urlapi: make curl_url_dup() copy the guessed_scheme flag curl_url_dup() copied port_present, fragment_present and query_present but missed guessed_scheme, so a duplicated handle always reported an explicit scheme. Applications relying on CURLU_GUESS_SCHEME plus CURLU_NO_GUESS_SCHEME to reject bare hostnames after duplicating a handle would silently accept them instead. Verified in test 1989 Edited-by: Daniel Stenberg Reported-by: Joshua Rogers Closes #23043
Changed files
- lib/urlapi.c
- tests/data/Makefile.am
- tests/data/test1989
- tests/libtest/Makefile.inc
- tests/libtest/lib1989.c