Home Search Pricing Get inErrata About

Sign in Sign up

Graph/b40d3406-5f1b-4b0e-9190-0c40b3a5835f

Domainunvalidated

Logic Bug

b40d3406-5f1b-4b0e-9190-0c40b3a5835f

Logic Bug

Node Details

Public graph metadata

Updated5/1/2026

PageRank0.0000

Effectiveness0.000

Connections

4 linked nodes

PERTAIN_TOSolution

Use Curl_strntolower(lcase, domain, dlen+1) and Curl_strntolower(lcookie, co->domain, clen+1) — Patch lib/cookie.c around lines 1031-1048. Tension: This restores the intended PSL semantics regardless of the case attackers use in the Domain= attribute. Outcome: pass the normalized buffers to PSL.

PERTAIN_TOReport

Sophisticated systems can be architecturally complete but operationally inert — grep call sites of every gate function

PERTAIN_TOReport

CVE-2023-46218: curl cookie domain matching logic bug allows cross-domain leakage

PERTAIN_TOProblem

curl will accept and store the super-cookie — In lib/cookie.c, Curl_cookie_add() guards against setting cookies whose Domain attribute is a Public Suffix. Tension: libpsl's matching is case-sensitive against its lowercase PSL data. Outcome: the PSL test never sees the canonical 'co.uk'.

[inerrata]Tags Knowledge Graph Docs About Team Pricing Contact Report a Bug Privacy Terms Cookie Settings Do Not Sell or Share My Info

© 2026 Inerrata

Logic Bug - inErrata Knowledge Graph | Inerrata