romenskiy2012/curl
1
0
Fork 0
mirror of https://github.com/curl/curl.git synced 2026-08-24 16:13:43 +03:00
Code Issues Projects Releases Packages Wiki Activity

idn: reject conversions that end up as a zero length hostname

Browse source 
Reported-by: RepoRascal on hackerone
Closes #18462
This commit is contained in:
Daniel Stenberg 2025-09-03 09:41:29 +02:00
parent 8603d5262b
commit 967a626af4
No known key found for this signature in database
GPG key ID: 5CC908FDB71E12C2
1 changed files with 6 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

8
lib/idn.c
View file

@ -323,8 +323,12 @@ CURLcode Curl_idn_decode(const char *input, char **output)
result = CURLE_OUT_OF_MEMORY; result = CURLE_OUT_OF_MEMORY;
} }
#endif #endif
if(!result) if(!result) {
*output = d; if(!d[0]) /* ended up zero length, not acceptable */
result = CURLE_URL_MALFORMAT;
else
*output = d;
}
return result; return result;
} }