diff options
| author | Daniel Stenberg <daniel@haxx.se> | 2020-08-16 11:34:35 +0200 |
|---|---|---|
| committer | Daniel Stenberg <daniel@haxx.se> | 2020-08-17 14:33:09 +0200 |
| commit | 3c9e021f86872baae412a427e807fbfa2f3e8a22 (patch) | |
| tree | 13f8dcd7655ead28abee32bbca8b8783335f4d2b /lib/url.c | |
| parent | 687908c6e6332b2bf4ba74b271e795f9c65a5a61 (diff) | |
| download | curl-3c9e021f86872baae412a427e807fbfa2f3e8a22.tar.gz | |
Curl_easy: remember last connection by id, not by pointer
CVE-2020-8231
Bug: https://curl.haxx.se/docs/CVE-2020-8231.html
Reported-by: Marc Aldorasi
Closes #5824
Diffstat (limited to 'lib/url.c')
| -rw-r--r-- | lib/url.c | 2 |
1 files changed, 1 insertions, 1 deletions
@@ -630,7 +630,7 @@ CURLcode Curl_open(struct Curl_easy **curl) Curl_initinfo(data); /* most recent connection is not yet defined */ - data->state.lastconnect = NULL; + data->state.lastconnect_id = -1; data->progress.flags |= PGRS_HIDE; data->state.current_speed = -1; /* init to negative == impossible */ |