SCHEMA_VERSION=1
ROLE=fixed
ATTEMPT=1
PRODUCT=curl command-line tool using libcurl
REPOSITORY=https://github.com/curl/curl
COMMIT=4f6aa41a0145e930e766775dbe860883d350aa0a
BINARY=/pruva/project-cache/build/cve-2026-80255/fixed/src/curl
BINARY_SHA256=f0610ef864f0e230286b7714561bb93b58b5a141a3cdf7b932b9af8d945f44c1
CURL_VERSION=curl 8.22.0-DEV (Linux) libcurl/8.22.0-DEV OpenSSL/3.5.5 nghttp2/1.68.0
ENTRYPOINT_KIND=tcp_peer
SERVICE_STARTED=true
HEALTHCHECK_PASSED=true
TARGET_PATH_REACHED=true
ATTACKER_HEADER_HEX=5365742d436f6f6b69653a20736573733d5345435245543b09536563757265
COOKIE_JAR_SECURE_FIELD=TRUE
PLAINTEXT_COOKIE_HEADER_SEEN=false
EXPECTED=secure_field=TRUE cookie_seen=false
RESULT=PASS
--- LOADER AND LINKER EVIDENCE ---
	linux-vdso.so.1 (0x00007ffd775bd000)
	libssl.so.3 => /usr/lib/x86_64-linux-gnu/libssl.so.3 (0x000074b68e68e000)
	libcrypto.so.3 => /usr/lib/x86_64-linux-gnu/libcrypto.so.3 (0x000074b68e074000)
	libnghttp2.so.14 => /usr/lib/x86_64-linux-gnu/libnghttp2.so.14 (0x000074b68e04a000)
	libc.so.6 => /usr/lib/x86_64-linux-gnu/libc.so.6 (0x000074b68de29000)
	libz.so.1 => /usr/lib/x86_64-linux-gnu/libz.so.1 (0x000074b68de0b000)
	libzstd.so.1 => /usr/lib/x86_64-linux-gnu/libzstd.so.1 (0x000074b68dd46000)
	/lib64/ld-linux-x86-64.so.2 (0x000074b68e941000)
--- HTTPS SETTER PEER ---
LISTENING mode=https-setter address=127.0.0.1 port=46563
ACCEPTED mode=https-setter peer=127.0.0.1:44854
TLS_ESTABLISHED version=TLSv1.3
REQUEST_HEX=474554202f7365742d636f6f6b696520485454502f312e310d0a486f73743a207461622d636f6f6b69652e696e76616c69643a34363536330d0a557365722d4167656e743a206375726c2f382e32322e302d4445560d0a4163636570743a202a2f2a0d0a0d0a
REQUEST_TEXT_BEGIN
GET /set-cookie HTTP/1.1\r
Host: tab-cookie.invalid:46563\r
User-Agent: curl/8.22.0-DEV\r
Accept: */*\r
\r

REQUEST_TEXT_END
SET_COOKIE_HEX=5365742d436f6f6b69653a20736573733d5345435245543b09536563757265
RESPONSE_SENT bytes=90
--- COOKIE JAR ---
# Netscape HTTP Cookie File
# https://curl.se/docs/http-cookies.html
# This file was generated by libcurl! Edit at your own risk.

tab-cookie.invalid	FALSE	/	TRUE	0	sess	SECRET
--- PLAINTEXT CAPTURE PEER ---
LISTENING mode=http-capture address=127.0.0.1 port=43437
ACCEPTED mode=http-capture peer=127.0.0.1:51592
REQUEST_HEX=474554202f706c61696e7465787420485454502f312e310d0a486f73743a207461622d636f6f6b69652e696e76616c69643a34333433370d0a557365722d4167656e743a206375726c2f382e32322e302d4445560d0a4163636570743a202a2f2a0d0a0d0a
REQUEST_TEXT_BEGIN
GET /plaintext HTTP/1.1\r
Host: tab-cookie.invalid:43437\r
User-Agent: curl/8.22.0-DEV\r
Accept: */*\r
\r

REQUEST_TEXT_END
RESPONSE_SENT bytes=59
--- SETTER CURL OUTPUT ---
--- CAPTURE CURL OUTPUT ---
OK