HTTP/1.1 response framing violation and unsafe connection reuse when transfer decoding is disabled
该报告还没有中文解读。
原文摘录
摘自原文（10219 字符中的一小部分）
libcurl can incorrectly reuse an HTTP/1.1 connection after a response containing both `Content-Length` and a non-chunked `Transfer-Encoding` when transfer decoding is disabled with `CURLOPT_HTTP_TRANSFER_DECODING = 0L` (`--raw` behavior). In this state, libcurl can treat `Content-Length` as the …
原文中的代码
Tag: curl-8_22_0 Commit: 01346829096c61b372692f6dc43ffa778c6caccd Platform: macOS ARM64 Build: Debug shared libcurl with AddressSanitizer and UndefinedBehaviorSanitizer
默认不展示报告全文。以上为简短摘录，完整复现过程请阅读原文。版权归研究员与 curl 所有。
时间线
- 报告提交
- 公开披露
阅读 HackerOne 原文 ↗作者 @thatcyberguyrich · 版权归作者与 curl 所有