Buffer Overflow in WebSocket Handshake (lib/ws.c:1287)

Summary: Buffer overflow vulnerability in curl's WebSocket implementation due to unsafe use of strcpy() in the handshake process. The vulnerability is located at lib/ws.c:1287 where strcpy(keyval, randstr) is called without proper bounds checking, despite having a bounds check earlier in the code.

   # Save as websocket_exploit.py
   import socket
   
   class WebSocketExploitServer:
       def __init__(self, host='127.0.0.1', port=8080):
           self.host = host
           self.port = port
           
       def start_server(self):
           self.server_socket = …