Blame SOURCES/0023-curl-7.61.1-no-https-proxy-crash.patch

c3634a
From 9d5903ebcbcbcc4f3a997ec7d5552721c5383b9f Mon Sep 17 00:00:00 2001
c3634a
From: =?UTF-8?q?Martin=20Ba=C5=A1ti?= <mbasti@redhat.com>
c3634a
Date: Thu, 27 Aug 2020 23:09:56 +0200
c3634a
Subject: [PATCH] http_proxy: do not crash with HTTPS_PROXY and NO_PROXY set
c3634a
c3634a
... in case NO_PROXY takes an effect
c3634a
c3634a
Without this patch, the following command crashes:
c3634a
c3634a
    $ GIT_CURL_VERBOSE=1 NO_PROXY=github.com HTTPS_PROXY=https://example.com \
c3634a
        git clone https://github.com/curl/curl.git
c3634a
c3634a
Minimal libcurl-based reproducer:
c3634a
c3634a
    #include <curl/curl.h>
c3634a
c3634a
    int main() {
c3634a
      CURL *curl = curl_easy_init();
c3634a
      if(curl) {
c3634a
        CURLcode ret;
c3634a
        curl_easy_setopt(curl, CURLOPT_URL, "https://github.com/");
c3634a
        curl_easy_setopt(curl, CURLOPT_PROXY, "example.com");
c3634a
        /* set the proxy type */
c3634a
        curl_easy_setopt(curl, CURLOPT_PROXYTYPE, CURLPROXY_HTTPS);
c3634a
        curl_easy_setopt(curl, CURLOPT_NOPROXY, "github.com");
c3634a
        curl_easy_setopt(curl, CURLOPT_VERBOSE, 1L);
c3634a
        ret = curl_easy_perform(curl);
c3634a
        curl_easy_cleanup(curl);
c3634a
        return ret;
c3634a
      }
c3634a
      return -1;
c3634a
    }
c3634a
c3634a
Assisted-by: Kamil Dudka
c3634a
Bug: https://bugzilla.redhat.com/1873327
c3634a
Closes #5902
c3634a
c3634a
Upstream-commit: 3eff1c5092e542819ac7e6454a70c94b36ab2a40
c3634a
Signed-off-by: Kamil Dudka <kdudka@redhat.com>
c3634a
---
c3634a
 lib/url.c | 3 +++
c3634a
 1 file changed, 3 insertions(+)
c3634a
c3634a
diff --git a/lib/url.c b/lib/url.c
c3634a
index d65d17d..e77f391 100644
c3634a
--- a/lib/url.c
c3634a
+++ b/lib/url.c
c3634a
@@ -3074,6 +3074,9 @@ static CURLcode create_conn_helper_init_proxy(struct connectdata *conn)
c3634a
     conn->bits.socksproxy = FALSE;
c3634a
     conn->bits.proxy_user_passwd = FALSE;
c3634a
     conn->bits.tunnel_proxy = FALSE;
c3634a
+    /* CURLPROXY_HTTPS does not have its own flag in conn->bits, yet we need
c3634a
+       to signal that CURLPROXY_HTTPS is not used for this connection */
c3634a
+    conn->http_proxy.proxytype = CURLPROXY_HTTP;
c3634a
   }
c3634a
 
c3634a
 out:
c3634a
-- 
c3634a
2.25.4
c3634a