setopt: more careful cleanup of the HSTS cache

Reported-by: Joshua Rogers
Closes #21615
This commit is contained in:
Daniel Stenberg 2026-05-14 23:23:08 +02:00
parent 978ea5afec
commit d6571f7a70
No known key found for this signature in database
GPG key ID: 5CC908FDB71E12C2

View file

@ -1280,8 +1280,16 @@ static CURLcode setopt_long_misc(struct Curl_easy *data, CURLoption option,
return CURLE_OUT_OF_MEMORY;
}
}
else
else if(!data->share || !data->share->hsts) {
/* throw away the HSTS cache unless shared */
Curl_hsts_cleanup(&data->hsts);
/* flush all the entries */
curl_slist_free_all(data->state.hstslist);
data->state.hstslist = NULL;
}
else
/* detach from shared HSTS cache without freeing it */
data->hsts = NULL;
break;
#endif
#ifndef CURL_DISABLE_ALTSVC