libcurl: Host-Only Cookies Leak to Alternate IPv4 Forms

libcurl canonicalizes numeric IPv4 hostnames during URL parsing and redirect handling (example: 127.000.000.001 to 127.0.0.1). When a host-only cookie (no Domain= attribute) is set, it is stored in the cookie jar with the host string (127.0.0.1).

if(*c == '0') {
  if(c[1] == 'x') {
    rc = curlx_str_hex(&c, &l, UINT_MAX);
  }
  else
    rc = curlx_str_octal(&c, &l, UINT_MAX);
}
else
  rc = curlx_str_number(&c, &l, UINT_MAX);
...
result = curlx_dyn_addf(host, "%u.%u.%u.%u",
                        (parts[0]), (parts[1]), …