romenskiy2012/curl
1
0
Fork 0
mirror of https://github.com/curl/curl.git synced 2026-08-25 01:03:31 +03:00
Code Issues Projects Releases Packages Wiki Activity

urlapi: fix an issue parsing file URLs

Browse source 
Fixes #21743
Closes #21764
This commit is contained in:
tiymat 2026-05-27 00:44:31 -02:30 • committed by Daniel Stenberg
parent e2ca8408c4
commit f1959ae962
No known key found for this signature in database
GPG key ID: 5CC908FDB71E12C2
3 changed files with 16 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

8
lib/urlapi.c
View file

@ -876,13 +876,19 @@ UNITTEST CURLUcode parse_file(const char *url, size_t urllen, CURLU *u,
path = &url[5];
pathlen = urllen - 5;
/* RFC 8089: file-hier-part = ( "//" auth-path ) / local-path, where
local-path also starts with a "/". So reject anything that doesn't
start with at least one "/" */
if(path[0] != '/')
return CURLUE_BAD_FILE_URL;
/* Extra handling URLs with an authority component (i.e. that start with
* "file://")
*
* We allow omitted hostname (e.g. file:/<path>) -- valid according to
* RFC 8089, but not the (current) WHAT-WG URL spec.
*/
if(path[0] == '/' && path[1] == '/') {
if(path[1] == '/') {
/* swallow the two slashes */
const char *ptr = &path[2];