romenskiy2012/curl
1
0
Fork 0
mirror of https://github.com/curl/curl.git synced 2026-04-15 01:31:41 +03:00
Code Issues Projects Releases Packages Wiki Activity

idn: reject conversions that end up as a zero length hostname

Browse source 
Reported-by: RepoRascal on hackerone
Closes #18462
This commit is contained in:
Daniel Stenberg 2025-09-03 09:41:29 +02:00
parent 8603d5262b
commit 967a626af4
No known key found for this signature in database
GPG key ID: 5CC908FDB71E12C2
1 changed files with 6 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

8
lib/idn.c
View file

@ -323,8 +323,12 @@ CURLcode Curl_idn_decode(const char *input, char **output)
result = CURLE_OUT_OF_MEMORY;
}
#endif
if(!result)
*output = d;
if(!result) {
if(!d[0]) /* ended up zero length, not acceptable */
result = CURLE_URL_MALFORMAT;
else
*output = d;
}
return result;
}