From 5bff1c35f11e2e633459051c23e0ce339bc05b99 Mon Sep 17 00:00:00 2001 From: Daniel Stenberg Date: Sun, 14 Jun 2026 12:44:44 +0200 Subject: [PATCH] socks_sspi: store socks5_gssapi_enctype Store the unwrapped protection level in `conn->socks5_gssapi_enctype` to prevent the proxy from contuning unprotected. Matches the GSSAPI version of the code. Reported-by: Trail of Bits Closes #22004 --- lib/socks_sspi.c | 1 + 1 file changed, 1 insertion(+) diff --git a/lib/socks_sspi.c b/lib/socks_sspi.c index ef3d1c6ba0..c4e0bb7d5d 100644 --- a/lib/socks_sspi.c +++ b/lib/socks_sspi.c @@ -462,6 +462,7 @@ static CURLcode socks5_sspi_encrypt(struct Curl_cfilter *cf, ((socksreq[0] == 1) ? " GSS-API integrity" : " GSS-API confidentiality")); + cf->conn->socks5_gssapi_enctype = socksreq[0]; return CURLE_OK; fail: