romenskiy2012/curl
1
0
Fork 0
mirror of https://github.com/curl/curl.git synced 2026-08-24 18:03:31 +03:00
Code Issues Projects Releases Packages Wiki Activity

ldap: reject control characters in URL-decoded filter values

Browse source 
Closes #22524
This commit is contained in:
anupamme 2026-08-10 00:31:24 +00:00 • committed by Daniel Stenberg
parent 874a54de5d
commit a61f2f9219
No known key found for this signature in database
GPG key ID: 5CC908FDB71E12C2
1 changed files with 1 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

2
lib/ldap.c
View file

@ -840,7 +840,7 @@ static curl_ldap_num_t ldap_url_parse2_low(struct Curl_easy *data,
LDAP_TRACE(("filter '%s'\n", filter));
/* Unescape the filter */
result = Curl_urldecode(filter, 0, &unescaped, NULL, REJECT_ZERO);
result = Curl_urldecode(filter, 0, &unescaped, NULL, REJECT_CTRL);
if(result) {
rc = LDAP_NO_MEMORY;