diff options
| author | Daniel Stenberg <daniel@haxx.se> | 2020-08-16 11:34:35 +0200 |
|---|---|---|
| committer | Daniel Stenberg <daniel@haxx.se> | 2020-08-17 14:33:09 +0200 |
| commit | 3c9e021f86872baae412a427e807fbfa2f3e8a22 (patch) | |
| tree | 13f8dcd7655ead28abee32bbca8b8783335f4d2b /lib/easy.c | |
| parent | 687908c6e6332b2bf4ba74b271e795f9c65a5a61 (diff) | |
| download | curl-3c9e021f86872baae412a427e807fbfa2f3e8a22.tar.gz | |
Curl_easy: remember last connection by id, not by pointer
CVE-2020-8231
Bug: https://curl.haxx.se/docs/CVE-2020-8231.html
Reported-by: Marc Aldorasi
Closes #5824
Diffstat (limited to 'lib/easy.c')
| -rw-r--r-- | lib/easy.c | 3 |
1 files changed, 1 insertions, 2 deletions
diff --git a/lib/easy.c b/lib/easy.c index 292cca7f6..a69eb9e56 100644 --- a/lib/easy.c +++ b/lib/easy.c @@ -838,8 +838,7 @@ struct Curl_easy *curl_easy_duphandle(struct Curl_easy *data) /* the connection cache is setup on demand */ outcurl->state.conn_cache = NULL; - - outcurl->state.lastconnect = NULL; + outcurl->state.lastconnect_id = -1; outcurl->progress.flags = data->progress.flags; outcurl->progress.callback = data->progress.callback; |