CVE-2020-8231: Connect-only connections can use the wrong connection

Summary: If a connect-only easy handle is not read from or written to, its connection can time out and be closed. If a new connection is created it can be allocated at the same address, causing the easy handle to use the new connection. This new connection may not be connected to the same server as …

#include <iostream>
#include <stdexcept>
#include <thread>
#include <chrono>
#include <unordered_map>

#include <string.h>

#include <curl/curl.h>

using namespace std::literals;

static void require(bool b)
{
	if (!b)
		throw std::runtime_error("Assertion failed");
}

struct alloc
{
	alloc …