When curl is instructed to download content using the Metalink feature, the contents is verified against a hash provided in the Metalink XML file.
The Metalink XML file points out to the client how to get the same content from a set of different URLs, potentially hosted by different servers and the client can then download the file from one or several of them. In a serial or parallel manner.
If one of the servers hosting the contents has been breached and the contents of the specific file on that server is replaced with a modified payload, curl should detect this when the hash of the file mismatches after a completed download. It should remove the contents and instead try getting the contents from another URL. This is not done, and instead such a hash mismatch is only mentioned in text and the potentially malicious content is kept in the file on disk.
There is a risk the user does not notice the message and instead assumes the file is fine.
{ "severity": "Medium", "issue": "https://hackerone.com/reports/1213175", "package": "curl", "affects": "tool", "CWE": { "desc": "Improper Input Validation", "id": "CWE-20" }, "www": "https://curl.se/docs/CVE-2021-22922.html", "URL": "https://curl.se/docs/CVE-2021-22922.json", "award": { "currency": "USD", "amount": "700" }, "last_affected": "7.77.0" }
{ "vanir_signatures": [ { "signature_type": "Line", "deprecated": false, "signature_version": "v1", "id": "CURL-CVE-2021-22922-04242d83", "source": "https://github.com/curl/curl.git/commit/265b14d6b37c4298bd5556fabcbc37d36f911693", "digest": { "line_hashes": [ "37673119137960171796178519420808298041", "181509556882954463382121180716838748991", "181411191908685143227558822609338175603", "335212291196454289828387022445247992752", "262555708240459028526766836930884616525", "242481344761360266243560315422189464171", "94042433795787149534526527042637651085", "138501494184854205560962978903027318145", "162238880680475584911767830699314468799", "248596036574191909792358393148913425414", "214699907870299030087594519999191288576", "195114516461878790286757511329661812198", "212592113075090261987910127641336887026", "173425523506963994731543218892105262698" ], "threshold": 0.9 }, "target": { "file": "src/tool_sdecls.h" } }, { "signature_type": "Line", "deprecated": false, "signature_version": "v1", "id": "CURL-CVE-2021-22922-0e315ff2", "source": "https://github.com/curl/curl.git/commit/265b14d6b37c4298bd5556fabcbc37d36f911693", "digest": { "line_hashes": [ "135282725383348546440808778232928188969", "221329160832422464420519850793376804320", "262892311210372225642405774464964592376", "316332730513611741639580353569946725473", "139814431840433805932900237554691167495", "294489606447942454342097258615907359852", "67689785342906670264595130570488132429", "326669702433111834722991706385897641418", "185732573296253193352088878972884639178", "59493843996346631554288351555818489439", "323983131706711679243699431131390513607", "229503648451477823778061821693092517558", "141606235376631107903053921900732580396", "205105469228599479597748498656400604263", "275825464366528831300770826263019141805", "279447601449233991352612211039064276892", "225323064106166893036682209798021734508", "185248643248435747533855958349639491900", "58226675521981654899366670713237662411", "309804689292585760460073231147612051028", "235903621929744987238706375200311059539", "105887349664117507643494673742536250970", "1099547245499185503564343060334030189", "278257670408279657435845321039985454399", "97100929466127121771406307493407246194", "203429165233720900366621446058985053743", "326711990369047856368767530373185259561", "334180006595050322536440601419074755128", "322750697828793714733152558976450149732", "60477892398725001269515992198722877793", "14172333369363178092101285529841744638", "32421016471448553873717660158029658103", "319499113009836924218185473051586824265", "260478304410652727176940208222827988369", "65726702030286280631360361509419217205", "270620987560563811339171491470615532274", "291028831241681798840230223863042695793", "69627912094939915787150893179414703839", "275146765122787399596725625033305092213", "265714926323940716791542984449815815410", "304896004392107507484770216402923900003", "329100869772539771698708318662428751210", "245518539781825268739531406859499235832", "195301014210934720930629782316490275947", "30471293639212509270313161498740572612", "146792630295441461832804685388460837107", "289043868804837630649107930284730776471", "315979554607230413333367863486756150629", "301972095211472681838364914341500694643", "285253468936520868327344808170771674001", "122680696786588845405486597083206425731", "286549713861384661070565306310919618261", "177655930606536050610528886599286771339", "153327847797047956258357119597252248827", "13555929737363276611463996373746611015", "313190923012454047378131803670405823631", "150716904077189768967942461093133914360", "16526794873810633040053314101909815435", "196841277847385721691145972169131235270", "259378121361236652964217271972581676218", "83802211632874389892709638865333296308", "335007710340469896214084668351606023717", "51039503282870871805823068834180528521", "252865636499844914498178490827543683938", "247720769372811362225073054080212679696", "109587485530446331972464772970891349470", "248995345026111515387793160367891323486", "276222027230841723569399948022782416869", "271019601725842909054283226622230779856", "330492897782147662830070923282894100975", "290640272191554823982979266743816921449", "20373495600512219696739120755361168999", "162039938436124290153994726277777514763", "74376036333887408163974410492177179384", "248449201830177782205029618535958960505", "294535046546735412654270428884227753501", "11369134795515138174071004835324457234", "191748125340435112402916754323037266212", "90424030957650822629038548678033859728", "43495298193955618363849770278020176475", "247550738264042807506659220311157212582", "66070386677027970576039956942809928990", "121860864523828432164534102984212253587", "316297422623021334816850508230972081105", "3334921269710020683273980166800766631", "165349260688888736711318209060027697077", "187803197496870630446513673501865553075", "250304218395437781787271873295180922330", "320967611838688681864070966113820756197", "37569813534227309440534677857903401344", "160931698467783883477774396264606624916", "316460093761397517164849698129579368296", "95464924694556165826236928902692365218", "320915163020557037981066059613768986088", "129134092654164866373097608404564884608", "272163247076176697745950716441827940360", "204249822272809383875556429485826650863", "294670350425254487261747275270884835788", "294559162499862443386481306279391337754", "31862345469860789134172569492963979197", "113645879168193862890416458260983946727", "206278028272788502009574456585904150782", "126621822676431187047073642398378142799", "78466169773450609661812022901059620769", "237537941264663478161715536665135777321", "98473576533179708995580837862140707354", "19566067330142443140950353441213023135", "304655003404868191828759595929948546032", "28477621748999935528858324990618435418", "259355159728054506132977710481746741582", "151606894313547907122328642684813727540", "278051014722353680617978868074691414926", "166618145255579729254466172269857093532", "141623978884248391315818498199482552452", "187138434563990848323369436194929294500", "113701549285100942815862944337440375751", "302593389347056603044721084762124046124", "11363757308738330070702853070755482204", "132505408577808126472213829073467337855", "262023023337586815958623026735543295694", "245743373152332599662102729062304687325", "194190154177044689207585102444483026434", "57015376471209303948219720422081652062", "195891027898912454864119469672624889974", "192496459477457212703339604267420866863", "228202574130972193908290370297814640379", "201219063056367727583724304992906048773", "265922717839583004773096821869337467291", "175000924198824848443147900640023633271", "226013759218588926041464528119872773942", "92834853513657893016438581198239350385", "162615063616868839768855899957577251487", "265269696389275166665442354864475109814", "310189628075632541226698750133114801103", "334817733532779971049091862759503379942", "80401226222974790865636011487430865715", "47936683622169408284981886539093386679", "119723043869483771231999900020168151063", "287443397485302885650727842347858918741", "74303485550482164572205583001934242912", "278841962458386362766717516117319086480", "173210928141505101458602860695406967566", "23827401062792970734344404984809642803", "320868890195870584771769115079381664734", "328556945912622038701783545712357663675", "281074929286831854103691610540390744030", "98038897632215651799032682737045151976", "123721797813221413721668967891279805744", "137676328907390867964086498237187468107", "26229943269318672145431534274992854979", "85968721091381622211520127282737508847", "197408421327000867369254832710645017037", "194214481608918338902758808134179474917", "236954738912092739951389764421666294489", "304602252844306488162880156093090861843", "169920789255405870716951346101475636095", "256886548516149144790928132727975176845", "193433484603464763364336198741441418305", "300941191835770698290023598977012594856", "71278628065174358282833685738065235413", "98038897632215651799032682737045151976", "123721797813221413721668967891279805744", "76593732822605619641084699418285779127", "321049306035671229833957346150937391970", "322553050327986868493723947364969699665", "148731137812215354515738250832229283595", "269017810791837885128415507215506645846", "110876981723188379206502572667224742617", "88284402937700113144465259131080280524", "164520081979522882716956634273263052161", "2233592809724679282883417796603148668", "177767391460127148717409683820165032831", "46942364879469124770736683808698475417", "26591177347484002775520694071157065200", "98038897632215651799032682737045151976", "123721797813221413721668967891279805744", "57069350511149749358678440431534053764", "116416537940899752887978442534689969879", "65181399657741828173472007985800613154", "95390887270911679840734168773497034972", "186614077693834197089818611581265490957", "170240873661010291381825877620238378880", "248333044437264079169847148340275654985", "162159641378647011585948991799296980455", "2911251427746308731047030606969136169", "189625046552444750445579428176301065479", "20815639621727890849660710215526927556", "72385567989506391713020991083765530240", "25883292638366247908758027196203161053", "327690665387039101466586005954742025927", "322182348577347881352280373949477945524", "336738082134758982042196095924751806273", "118174273556099846149888666344615535978", "242394027460182114039337381908060588514", "49166770972894235337234852121852465450", "46745771700415431412718105544502888074", "299091659719048482809456975453825626184", "269410855173541563394241225139158774891", "309163713154367084014111238041293805094", "47061274290542118860039939400116791344", "206406338637411693770377214392627660613", "647729351838094205421069084681661457", "142006059727019672552311141637251045923", "20373495600512219696739120755361168999", "162039938436124290153994726277777514763", "74376036333887408163974410492177179384", "55440427630585500157594045529531515132", "210176449376239399475424641897839107716", "239424896224037159531938692149003907141", "223962386421220199408862579522210455133", "185281925783161448440044108259380620746", "22984593922754104535728380950766582147", "3392178163455042545201420930689787039", "136723978963341188727311943003258774441", "107282274491530835146765563568975999333", "39982282517510299363447365669269354546", "79440965446518023763790229784773771294", "307281746205291533884612768936900441731", "321398390321125436732226271436546750965", "280497413469960596873736818420949756525", "184284386360094417081389012302439413943", "187803197496870630446513673501865553075", "250304218395437781787271873295180922330", "320967611838688681864070966113820756197", "55440427630585500157594045529531515132", "210176449376239399475424641897839107716", "284284015826461450260479919973165696352", "224531644839036202388174602059877646681", "71367009053432291111253173047024242490", "146337987651453001937483202848713082362", "180756591697197873089925481070217557930", "306380872706962000490046698605075544774", "73707219782744511355565871038267089487", "3974078209079909842717632099371408090", "181220298655001634486896091994829546318", "211127197379941668349241166860812354059", "207453555391559098060786829065560903918", "328121509029048496958992461678119053956", "60511328323038715463885503113328614557", "206278028272788502009574456585904150782", "126621822676431187047073642398378142799", "78466169773450609661812022901059620769", "55440427630585500157594045529531515132", "210176449376239399475424641897839107716", "140063889182784486594812605274460437166", "120698961692956002623492142391626665762", "236221643000550719239183687480979969502", "16584747434522929783985154537986046380", "78434271344018873139119761317314527499", "313999707114605472911510412493172190580", "142207985282086564778304134165723800851", "169128167071437233343742589243287381439", "201340937466735790245700504079551439103", "103337228437874438114209486057414993024", "116120319908361892039674634130571170100", "332877317492036333573212891983074225616", "286421092583260351780780304458524970018", "251214476735949944699598255923371623682", "13213063041527614359646520996224418272", "120711458221488192966871069506772130840", "79632790574788351910577487911992718921", "55663487171477160226299247106486682688", "78730787289716797382942173146991858608", "79117700026987926521433588444586136155", "293024752993616237290305096963399784792", "259940269618429575146191551011672979658", "255317780540566046725321638676789295515", "263486105055465689809882920297834102019", "266995254830251020499279024141975079254", "141130035923941707526019857244380434506", "220250442880539832666408601968527227121", "93628093610457380472624125646919710190", "195621052353846391934632093753682807319", "317608673938806841680029025864463440573", "72569131364614252284687987713831636981", "230473747466319218759482191322479566054", "98990479616905857380033190590403109051", "31161093893281758432452826187446388770", "338970651665281635734122322198071377947", "324957497333296538928947054439019056222", "7609318811732384570563884971136686179", "35006469278665736041406047507658632657", "230749265623178911736029227248998450443", "103349578004944131965483484058348878016", "160106738668818508947689711988432445071", "54280351229940542205836858728848084260", "80034143840907265264419000534300465383", "152163210778667365805393163626978444029", "40326161088980501924672280779288420494", "321451173837218444526123099435485380326", "114126645051726535752884329309037565839", "58597804458105525267300973087851280799", "109478240217428694408170176363976510454", "176404496372643570904580014408594079721", "92900321468445748842739278779852914217", "115842107552040392501186099718885162839", "144765753191676756278301464383092642536", "35889772386700092573450905905752761955", "121203616338116375829061757001707479916", "32129110259067683862118765813506096221", "191779865876553890260785370920067217198", "104998861890894447775613345806273488500", "23273777595727432398927263960362525518", "99657141556211552938644715806578757925", "158145909393068794789311063293174519143", "42638427698752091979844345359896972799", "59945467538071670263341375429059109294", "268100697213153644535035268281075541165", "201980786897583720672111036768347611173", "298923695925366873950512060278060486149", "18083033385193096085358104421717412705", "34677204936219820191102034045296798610", "218139968885863618667142609842959690061", "260227953380893271373643420280856472740", "121789202332391866860088555958083221347", "203467504307103873867630258808533144213", "263974789754125745260916370110038539108", "297288360407285435821183174074619008347", "19346382920052693032499565804746936891", "6704835261539726822955779365987202329", "21720506711110566245259324543855827078", "235114411749730251950441270371481319100", "86024035267941017959943471858979559726", "36536201630079970353107258221965395810", "192634237689940936531105722650177751438", "173668176901718553292702758127339028550", "149781387939901107761143643074113975411", "218413338205932335151733457079534923481", "95125418469560486848205328278048664163", "173203007270955205901052125389080442446", "120365924841759199740382301312369223169", "300053967611591266794599280882961672203", "239648086504656244045723877996160917266", "148160722167121192896997014860804097331", "268303356040503989756749565544350133714", "232052303374923790890362572689226051314", "246444545938943159472918028892070032171", "205806083783687463826760319756672177302", "222169920334051268673960102776763161726", "242628941017125065722227284176811252250", "123169257115680691860833674058868623574", "65459218772202739069080247391760756493", "153081553126310621022100056094341234801", "97820362915487498071287266915553469832", "118634247072587122774185144851231471229", "240573839417239430447811768744964976806", "79002443492387107985170424654500021641", "153956542749197123415683876460426297007", "251018130284507737907037552296544077479", "214403372863346842605068526519851140597", "94322533113847629020397867563031082499", "172768977667995904406855703544273174606", "148413322525059142033817010104598907712", "29419771239725181981270698003856274750", "70755702241370709555700822526733040482", "299241275137729169731172006506388535585", "24845410134538565776164221724632826800", "99916256514679117366633266943238832953", "228287553900438061698331157460895787808", "196206166959594467686131968415261127758", "63119264300196512417088121190725476560", "67244468445765725468714458325027103306", "22973063089417373168555314315129682328", "298953036794681790797036756031763846190", "314724684084769217047948037080572376357", "276244821336743390127559618543159458214", "340095170904781296530002303264539139518", "278175792582325212553881728356318876705", "274153871140703943651028373569316275556", "298627477240458239167594855479958546135", "104850068014099889233104821358697188198", "37260765364519268683297364614899306280", "54524430728034648057618803034173065067", "328910411849351690174616363071995768151", "133977208262800838110400678720932310902", "154698734128621070796941899170040492389", "323737168565361367936944863394807571208", "324274836005104270930443429630854194047", "315187959249132843339434403315719610746", "278494883817108587567114350007325064900", "288443447812963916102084929576299313048", "127296781828457613276448859986837423902", "188208086916326042659023245557525740807", "54061197743261023526820350183066704647", "17510028595320073000492447111164062127", "246329461597570912228985666127174270146", "131769472693724445775673604375552559464", "3351787395721414903147023520229907637", "113865607508218514471956051947005753714", "67607494473551956679770592615720983568", "110390522379950918977591212662568483863", "106839360478495578446987600395599494935", "211341273883013157745675764744643775319", "75276004919513281199026282889937138169", "166663946337780979361927210368217472254", "93257297967689286276487858067812949229", "217239195231229183297761476245891658232", "91955374726390342317894024956640142217", "52277601173903083337077023015318269525", "68614853151663472592601337790268384625", "256012911908021773627833755381145060092", "104936165108157328018023787902436455699", "167366534290193695761576536094269312874", "320855446265363722279152259126605227813", "121661571187863246957402983596633832381", "75663681009605465148976947267357486714", "221731190596220187964526136832699664544", "115667584663757040374404109579000028487", "157048843540608600580889218432231000646", "61563576024972127430154680534650348024", "168834201226700026315695128898299355098", "303434669514481174640546854728326241244", "189127634779286382998854040675473258220", "57086870253587307788953274512693321408", "229921143415535088783535787899549522640", "55019121205738906736775362126979312068", "26007456318256316043734714281106666454", "137676054934201519886184228237865194163", "53912075459966856998102518672630581967", "187451233488688483158185068693914957289", "308918288348426378950160151112758547651", "301939210155859385634911213814739275257", "61277791267517204547167700260220792781", "304537485708091996165730321482693546672", "316142740368742818961616504525084749352", "49658010671103822003861291430104129445", "178398746617122233378216330196481261518", "113606289719693094874365808030375802936", "78472831510636679939136205726478727111", "2031088727838149480677917638592159077", "139331857939566631350940283497942655253", "113309559462137235094585957171616019508", "180577443311493667366552377109254104622", "258685532751838290108233832155994444534", "250931940388360082749551053199305101660", "7314426844822428801452562007040424319", "178621501206509558318941527187794851429", "101237436030439335875141700052735406191", "207060727559612710551669973623719022792", "125847463967098918615288613142756752788", "266768330679470596216652858044472551426", "197076160437522870133105035422527584225", "164616861926841569697614801342550366852", "229348157064171669531662684078554891494", "68618454673334817176100296773805061820", "107127509209260875231577675189546544729", "162223394724933582858052873107351238699", "321986699530780976202525765375466892906", "302692369917903374687257225865045518154", "27840288062096131065294256158294493755", "293844920081064842592910334477004040466", "90596844442575773507399690233376967151", "143405838123875773686618139400974377695", "21317611816464199064127771463752613722", "202636053955415889087341400143399532596", "272848510888512479710274258937812248820", "185823154904401995861333681251368032123", "220844485719134634346050841757101729480", "113097910945677079398223901803722002225", "213914067638872117806533532451560074498", "229924858250195872028343468600037862341", "273947437634622958738143473782816898684", "158261603100929285227306479774963283289", "40675448524901983721612371968175020280", "201842922045678808474481548063399615904", "10150812193492819364641282985670993718", "297644299317968550767722735206226715763", "100935691936649657068278880017357827640", "196215116624388544416365750742817833326", "106530132098247113015971671325159603740", "132879571226761974382031700004207557420", "191221955361837491133741374594427425260", "38723242705065128106919073507545761501", "36914402127293934461765778960840032303", "323007795282708340910578477049325560918", "310106753568344237219731218221074137194", "220783990857670859901504450529394175776", "71106778447243870832586605470015490622", "317498000771486226420419997559015904814", "101572737552353248816791936055907647355", "208384275899172891087189800307915038868", "336227984918052582229984837631952484062", "234984732027222395690851447146532935857", "246284170577586066551298388376231459604", "221081316952878054210801975413575133914", "6619242486359701147804419459385367031", "89539249696893181521198609052548675541", "252826685748423434060301550639039725641", "288328496433850343884948828321565781921", "75407180318704451699303769443305508093", "106712262474031517296108011913988627335", "230329764089806773348279292576278766936", "246232917238758487966011498120635913463", "249618232477339918466244173582128382212", "163087121479442717830975461453832452179", "214652628045994350811680422508834592283", "123011538135140318146504960166844244778", "106633364225501708126527087185511585686", "251741098216236642429762009972782875963", "52857780441331045458135764758261817990", "139655829095302226481993907605864493861", "266525770999515813870915897749321861217", "200893028289512723018482189387877623647", "139775334439225904920468429789146893863", "75999146777189464093160524040054882910", "135963018637167839509966308866698073037", "181663846759257463063573919858902235197", "318010129426517372369162208649837381239", "315157686870330075437122116565321118333", "2975284307223354031183939634164515058", "14317570851191948128886765735952426136", "60506693773669660655609503916658589247", "10606075290665903406432763383619969494", "189899559175170013826333907144819044972", "281077464359003090632907526698873640309", "167533031498287314841558403981241768614", "72934738926244267500450668348867421682", "183934469635056758034482220069372494428", "56238113801611729363628145407653940840", "131953691503526785591094920600455531424", "43693651672511506419582617180681485734", "136929948373618905645451293500248701569", "260749621220604559262673783848399480791", "221920579977438384220169518340053986937", "292157415958611677650712211198475884513", "48761561058795310454958593160600422238", "222667231569387980563449025516209996702", "8987156285344892850640309501089869999", "317758480004677100212089645951861880192", "136913638810129777438157086499624591429", "49354951125049763470402676366213414858", "17357406019877738700477117087800855888", "244895746679718098196807361604661776703", "166318550894806914779747627139026486967", "69302656477834622608635939713389623614", "331253618972948692722194347222516811229", "231687302397954718618303302733858527796", "185956635218102502687166538083776528272", "33522662615502880659851605672138995272", "245424774474569033642998875798625407961", "162029990396810610141888882961059650937", "176976601240949219501189956498127085971", "153914251043244815632647656287034299621", "190949335752542209268712025424633020683", "93955036436288564190732989370416190333", "181307075908847939613454789727724877754", "159867849992334773237192097240374749326", "220491010284880572512989978898393130734", "172984573767386441123568606782309042269", "250133805166952727901272316652897273577", "187211934099857292053133729476445385869", "263985458121704874190832390938722875260", "259968951775110894744185010651977151767", "93951446240458092786661475967940437619", "16294828845612317441998495349162374840", "91134143731891103356416447157203658572", "181455033860200472662031271873718763254", "29578935551319280852959539278478048023", "22522954472109196917040381697818906867", "271259573045152676401035468869318765736", "280886474889860903615211927058181955260", "182017181589482733054397742611825023243", "138868124216094583101289603234166193275", "30809262751575513525871982055281029448", "9577352103588034148643772357096175213", "106923148181123914371916004605709430113", "12023408235596301118999754735431874780", "62741307844619637836144894759365553432", "119926035202129937213781129878212864160", "313403664496238997831102796237337724489", "211310883397365916755304831521615171003", "315512805986288123515312017410927023464", "150265958293649249235251956342401831517", "230976815814971503302955430215197907683", "238385412740913065782769220900614862127", "120274505225761131021234585749472953776", "24727319619973086863466673393808972372", "161975807818759867404897945694143587177", "157523517063686015731662196645275207852", "198986762026896103621762117806269971172", "337300123547115691546171966473735699043", "223375694292195725416286681480938424610", "147071303874434106573039876484251222258", "170343287798639391393293764266657598224", "277317924523531456640386393689932201941", "324564626156368247444761240484106686850", "54610086565408290398737193011578263633", "45734205303667648548567792792495571816", "138382785485015477595064301245478797498", "288300750282654165633683072930236040349", "337106590846623626177184980303306138325", "203071422017445360523096866705897925466", "139993978850631326315542360778170510050", "253762421470081111134689437111087088750", "274731151745598831047058424096312049851", "272866327372563816136268784220627441037", "235276729115023026546351576287709989849", "219073065972456801352889143594363607213", "162524591782762880352286260233106188329", "245151373553433644746976879445404574008", "262535542408046172900843948992878897289", "280442232996824727823920490385899283739", "55450889240050036382149538167677960896", "211244362759147406431269307044983696028", "66076023797327101764032584880441871578", "271946788593447374524712080492217450789", "174416813558259846154320284430133312406", "244684902162759610722056670792566391780", "114102497163042381143845742916200601705", "25755948646605840693349276819298655233", "131710761853745672133623793263144408910", "14688348094677530941001611221177793991", "243477386731590959358056165231009379865", "323000694194718232894572677150758208526", "235379281175788579148256864688524230397", "197530428400901019808436159093861879604", "266354111176658461891112687880215674818", "54736451352918134725808876979427792367", "14994040489964028269698095542016927513", "258777696865688858033169933049984513498", "186522086476285403493363925140671372601", "162311405461665203581651921316016598379", "56239252821696832441346035611054642641", "47022266919590811307569076460655076242", "41246754987492260634404024878793887217", "136316954080801022439300655553187900181", "261098473321149698246924388890897053667", "87090865736595965672112150397166068166", "59912902498390796122275720379511615884", "5555167157696355173910061037459280166", "134748068954631465008634810529680951199", "326686424974617018690508682943981568047", "273139609894150345831796987587289925985", "151451058522734113697599727001968537329", "119365874373335356000797858220881638476", "147492273013726253735441065878270120116", "169245492196146162055747364811342069642", "131364459167050308104082823340693150838", "65507628055196643731141043677643274980", "63753193549159472787376780299329499093", "326768638670650254537826272057452484891", "249473956324344771151086499020885230535", "56485307316972256077777749392538483937", "81948214185394286083613078068897497171", "69240746124653725149780095676052531257", "138540670544672689199386646524221559459", "5274536612638218301971638541469566817", "128914129167230213371113638250314109628", "177405139743214242847444809955332529280", "277007951185735789695999256432821917774", "323112688181586933092290052190316103892", "145303741745408496000257075818099749826", "292677082785265341755765421493933350047", "191325914881135334568157169826851648086", "63732336701941510383399392432344100086", "89327471771613446880455391615084125630", "287186723106476840233772075265617752631", "339763765949314872045856451790709006834", "83664817585263525371161397283984424919", "1586569322068871156347412597512045534", "212155709596049831795527339909376794829", "123728251002223944928721744946337022555", "41572614718965919295968632830530184090", "214989792562682400612174074906856078902", "228444454627600054124790484892439550379", "3099091598765264107563171224983651687", "304237705173451170771211514292884605443", "224542760765083329045993682689542149830", "174027708880792933001724444078261452168", "201581945468245439388662401375827232887", "223345182340438855633921805382907102698", "23825054072160856551554499945915266522", "67054705097806159884628152147087570561", "21683198859259486386688384992627110893", "264812549640959978385050609121221536739", "233463760480163329157882407118392590802", "97860050333880316190300025988162229974", "303245383144138292191628026406697293798" ], "threshold": 0.9 }, "target": { "file": "src/tool_metalink.c" } }, { "signature_type": "Function", "deprecated": false, "signature_version": "v1", "id": "CURL-CVE-2021-22922-0f3affe9", "source": "https://github.com/curl/curl.git/commit/265b14d6b37c4298bd5556fabcbc37d36f911693", "digest": { "function_hash": "94749708701631110611902292335043617041", "length": 120.0 }, "target": { "file": "src/tool_metalink.c", "function": "delete_metalink_resource" } }, { "signature_type": "Function", "deprecated": false, "signature_version": "v1", "id": "CURL-CVE-2021-22922-1119493f", "source": "https://github.com/curl/curl.git/commit/265b14d6b37c4298bd5556fabcbc37d36f911693", "digest": { "function_hash": "130932170071655301798810323924160719533", "length": 136.0 }, "target": { "file": "src/tool_metalink.c", "function": "SHA1_Update" } }, { "signature_type": "Line", "deprecated": false, "signature_version": "v1", "id": "CURL-CVE-2021-22922-1e98170a", "source": "https://github.com/curl/curl.git/commit/265b14d6b37c4298bd5556fabcbc37d36f911693", "digest": { "line_hashes": [ "238126618947640640874874779122431322918", "107847032543437969575798393630122350705", "253305501815496308986902000915176232346", "175708869921151455082791831104226787009", "281173377321163942782707048601501318188", "248001561059037122257758131314302820740", "124646938963183504605676764698951726798", "155207390287338332712319886333953076046", "64530790102875038699327369976565717235", "30498642370284782462946101624824234496", "31953386874952535292317607833534892004", "237753738568178381967169976593202666603", "308417740904740542568102178284629887586", "18481139399322776074400353345093461267", "321951323006992725958842606981468613638", "48855745240662675338672775206597920886", "290608963612942085494766153482325189933", "303472058483239256555074679406456609027", "250791915635621791402847911665440651539", "258294270597116390359719157374696075719", "242922794244660395108229152057484371982", "81320042937107219823104843617950754294", "179772291767356722600505581084810896355", "326258542986290277987813174124918199168", "260047872418925357609850656255874004662", "190884623371346882476025197641867051589", "40825834877851391642189818325929980290", "174759522522200191457813142388902380203", "38486330910784880794091462854821622245", "11330057782164245506769182241560033547", "88091605024029966602334406565378026091", "122426951159227054819147540206404759269", "336451396350361632015144524691040613088", "310706705706858027613130643411324656941", "265146167159409360308556982785505742099", "49982203852001000891054319662358269369", "25177068183139827913372551326798684446", "55220358665785572688500136087969518307", "205078121954013008757552217674927726513", "116743399309038214228805475714746231888", "47628866155484199792663407412283707617", "40914902152377432032746882296381571364", "245093208277167892722067273300772020470", "338248977267789203049845097013413363179", "36144416630892837454232186850307252498", "72526853922421767092693696319313684602", "289719391180947813079664732615370478387", "102486253779620309884935547893784455838", "252608679142567150958364585432283633575", "318467729080083489818369512495152573256", "248700297221394034611502018879561245327", "109439274653549508913300738272980720896", "8948610180965956098010682634543069051", "262511818881745308212932511134551989624", "112932374369099405619404129224278398104", "224769319136774734499420716594993602006", "81444838697284999825040566629953925706", "326618135042376091061131312137691177726", "64449821948313775878889235007596079228", "181668850293177587800217043338176678692", "141955681266113612902689253144769619073", "20329091764752375341554622386916910906", "79923813020946825156960704679727696974", "205310885683030878685363285935847648552", "99874883381194148424440767397120446277", "158824983655086425657174097961220740611", "132023508631943505423712974348312890515", "210043185015088610430605232568779274568", "71965967851379126838250414724281991626", "91711468308810017267807673268114850085", "268182543758289385014845893093663229503", "287227751882393267130197265820099916220", "213879189803735565063447278139368180267", "90101253469408121609894975974576672166", "127346373762765821501565481218422386194", "123454815929676122125668258917778179658", "154018120789682389417496028819768048880", "318354577987090571188380508722947842793", "335992817919004292109375867420864314381", "116166262198923252703500669081139239380", "86173820385710297314034221777310950113", "113749195528855737450303754955111145018", "222541177211041885472752246238054535665", "230583156586664067645257289780553593427", "159138439358993958022440386231914832483", "224087301175998442955851616665507735579", "313196530110329307582709886194725899986", "208811790854050830688328335721358471150", "147482614577740017339454720710971033120", "322431958961240719803218288670428740700", "158434601414931930903064112931134863690", "54089402351000096782517455324958514196", "279433737314183511100247504415381600636", "32585132330091052751632300344775397137", "172458664243830991118827266230799790503", "293106941001451528232093113655820281659", "177313819990368998339425350330205422866", "46994439644427343031316300522624606870", "150702335139084840830537227654688943841", "121962224681424788164542843799300508464", "72707103188083942943681344745395749404", "43639400684437576282218251843185794191", "6487661872166080053629376977203248201", "138972249244099920762781890193164036453", "100326531093942686903196826139813313691", "176880880979370940095769249648074508278", "26576855120580525205239108810077542911", "83915369493192919068790412610287913328", "336713786463569749786095185410135380270", "220060726447210604235840110341183116765", "132634610740879194743872337274609804307", "66171039007693732142501358878337913610", "78449470458016597626362726795366501573", "38871988206077447107904682187939328843", "38055922316460548392976745750568990708", "232457750462582135280149138719430280516", "6487661872166080053629376977203248201", "272572993998867180658908198856694075310", "100661380533289441069677006824942902244", "231965188103980607135961534281678527051", "41914518781777460780819007881725056143", "26265529317734005836587334882474093341", "33912425951595498545443859990942403540", "52414348410439266145685077318778432295", "121970829842661213927048973688604171307", "86741197957840016837332042099361581505", "286756247992022522203337373082009173665", "46994439644427343031316300522624606870", "272572993998867180658908198856694075310", "75407180318704451699303769443305508093", "285473706170440082231076329852143000970", "27804022927962029784244740073408383743", "144965082403440296190986348471248398905", "183804123495318335545319861880133894313", "339018214123645442040363885924503012365", "32714636819985440904255467986786079331", "329171781425026363097905343365812341518", "282043812367632245445372652384477464941", "335593650570606406200476055750566840117", "220581952796868530191580582696677507951", "253987211335387332772410889787978870893", "82923548807548585164751272305472894572", "181130134346704821497352634419268400798", "145763240363481254824954401940316564883", "92552793545131635329395662668916050694", "322801448187192869955205158082426525141", "210577313655112464079323087314538814033", "41000398677921569032150125697663144058", "41916910022473512040388493359918679986", "319333229637956759843586855574751205398", "60087993024480773366434388778968994554", "136645948552396586929257718820139309502", "283723899965204161539442769009273884343", "155511191913941820817170300971317962168", "167194304720481848638932288124165296621", "221221328298607565375416656790907993597", "34389044260793226770436441052556666225", "227903118007855827667798827663299154712", "212913362176554041050138566752112439587", "35753794870781617090177728002233751776", "307472324080177988941124958446057549510", "101202411762651882330296320455187392662", "30481330714328633980316768874297612733", "213548685695632558466691123103993364414", "201248216596353068034681392568008370104", "250856811371215474818134512463507090364", "310356339928305911511275686083559410462", "194433210204246304458396602048244456636", "111591231315030971119836594180641724470", "183086734750679236374822857590961822656", "219029804661173628539496838051206962196", "323064623816667995966119075236815218271", "151369956221144170454638234523813739873", "253105689672401959341212957044199070754", "9219317901388790260103252488826903807", "10789100670556486943309799974085477808" ], "threshold": 0.9 }, "target": { "file": "src/tool_operate.c" } }, { "signature_type": "Function", "deprecated": false, "signature_version": "v1", "id": "CURL-CVE-2021-22922-21e9397e", "source": "https://github.com/curl/curl.git/commit/265b14d6b37c4298bd5556fabcbc37d36f911693", "digest": { "function_hash": "24863504032157136399536347199043071280", "length": 576.0 }, "target": { "file": "src/tool_operate.c", "function": "run_all_transfers" } }, { "signature_type": "Function", "deprecated": false, "signature_version": "v1", "id": "CURL-CVE-2021-22922-25b64727", "source": "https://github.com/curl/curl.git/commit/265b14d6b37c4298bd5556fabcbc37d36f911693", "digest": { "function_hash": "163773562018292985696554892087482663801", "length": 75.0 }, "target": { "file": "src/tool_metalink.c", "function": "SHA1_Init" } }, { "signature_type": "Function", "deprecated": false, "signature_version": "v1", "id": "CURL-CVE-2021-22922-2c0460b0", "source": "https://github.com/curl/curl.git/commit/265b14d6b37c4298bd5556fabcbc37d36f911693", "digest": { "function_hash": "130865739466797585279356317766237745695", "length": 428.0 }, "target": { "file": "src/tool_metalink.c", "function": "checksum_from_hex_digest" } }, { "signature_type": "Function", "deprecated": false, "signature_version": "v1", "id": "CURL-CVE-2021-22922-2d6e5494", "source": "https://github.com/curl/curl.git/commit/265b14d6b37c4298bd5556fabcbc37d36f911693", "digest": { "function_hash": "218738989387860479762117678818833256580", "length": 119.0 }, "target": { "file": "src/tool_metalink.c", "function": "delete_metalink_checksum" } }, { "signature_type": "Line", "deprecated": false, "signature_version": "v1", "id": "CURL-CVE-2021-22922-2e0a5f24", "source": "https://github.com/curl/curl.git/commit/265b14d6b37c4298bd5556fabcbc37d36f911693", "digest": { "line_hashes": [ "38059543795180734574883350583483240027", "139446874057529892837448533047262080868", "178697720200636674016703378603466349262", "339290595208149695431903213772023493863" ], "threshold": 0.9 }, "target": { "file": "src/tool_main.c" } }, { "signature_type": "Function", "deprecated": false, "signature_version": "v1", "id": "CURL-CVE-2021-22922-387910b1", "source": "https://github.com/curl/curl.git/commit/265b14d6b37c4298bd5556fabcbc37d36f911693", "digest": { "function_hash": "12472102008237506311174694573624776381", "length": 33236.0 }, "target": { "file": "src/tool_operate.c", "function": "single_transfer" } }, { "signature_type": "Function", "deprecated": false, "signature_version": "v1", "id": "CURL-CVE-2021-22922-3bb721ea", "source": "https://github.com/curl/curl.git/commit/265b14d6b37c4298bd5556fabcbc37d36f911693", "digest": { "function_hash": "319424715794220306804988804463255284557", "length": 107.0 }, "target": { "file": "src/tool_metalink.c", "function": "MD5_Final" } }, { "signature_type": "Function", "deprecated": false, "signature_version": "v1", "id": "CURL-CVE-2021-22922-3c7524f4", "source": "https://github.com/curl/curl.git/commit/265b14d6b37c4298bd5556fabcbc37d36f911693", "digest": { "function_hash": "270194895751726828103794624035997446648", "length": 148.0 }, "target": { "file": "src/tool_metalink.c", "function": "count_next_metalink_resource" } }, { "signature_type": "Line", "deprecated": false, "signature_version": "v1", "id": "CURL-CVE-2021-22922-3fd6abd6", "source": "https://github.com/curl/curl.git/commit/265b14d6b37c4298bd5556fabcbc37d36f911693", "digest": { "line_hashes": [ "230454321588070645562984238368787701154", "191580311368203698316031164236125798566", "145965125191790849970155411357678685420", "47538459221706075986141231676011453558", "193842392750062754380137153866681315908", "197778405765996262173557123526327844500", "273676410238929713363881332983685081391", "191210939724052209629317735852511605405", "295196284260852987007565775958122868942", "189361561763121890359391767746126926952", "328483721547151031994817308660692268877", "61247452511972307875991949197202741871", "331585289743480498950982256392024324487", "36056896885604021571708093229370321376", "23535224408562524105668882384802228080", "276519937551562043707907153950161235564", "291327695298881537462690880715245778475", "43687200771966231828697863093788356687", "67160486242063398393383431271744126951", "321490387395120537591810436225280076517", "271934189179842111391101921019899492660", "286438184963114038212108060183011196161", "117422921681648272446805764512856325109", "196441865430920214016121414849065153414", "283426621053235291524357079701547947088", "299637078869041542593501795213264745014", "19804072079903189852458104876584655341", "128112221026954734641189011591433041408", "222626786581109254011456911265046407515", "17696124014978966696426354284196999522", "977431049981792707742637977228799209" ], "threshold": 0.9 }, "target": { "file": "src/tool_help.c" } }, { "signature_type": "Function", "deprecated": false, "signature_version": "v1", "id": "CURL-CVE-2021-22922-406d0114", "source": "https://github.com/curl/curl.git/commit/265b14d6b37c4298bd5556fabcbc37d36f911693", "digest": { "function_hash": "54080388103923057896997115506663777510", "length": 427.0 }, "target": { "file": "src/tool_metalink.c", "function": "digest_init" } }, { "signature_type": "Function", "deprecated": false, "signature_version": "v1", "id": "CURL-CVE-2021-22922-4145e1e7", "source": "https://github.com/curl/curl.git/commit/265b14d6b37c4298bd5556fabcbc37d36f911693", "digest": { "function_hash": "15920820507131563857972483574332208079", "length": 107.0 }, "target": { "file": "src/tool_metalink.c", "function": "MD5_Final" } }, { "signature_type": "Function", "deprecated": false, "signature_version": "v1", "id": "CURL-CVE-2021-22922-42c7d22b", "source": "https://github.com/curl/curl.git/commit/265b14d6b37c4298bd5556fabcbc37d36f911693", "digest": { "function_hash": "308593886337511823256589915125657768439", "length": 247.0 }, "target": { "file": "src/tool_help.c", "function": "metalnk_version" } }, { "signature_type": "Function", "deprecated": false, "signature_version": "v1", "id": "CURL-CVE-2021-22922-438a1985", "source": "https://github.com/curl/curl.git/commit/265b14d6b37c4298bd5556fabcbc37d36f911693", "digest": { "function_hash": "52752202288364152665880481782987185975", "length": 134.0 }, "target": { "file": "src/tool_metalink.c", "function": "MD5_Update" } }, { "signature_type": "Function", "deprecated": false, "signature_version": "v1", "id": "CURL-CVE-2021-22922-44e9b894", "source": "https://github.com/curl/curl.git/commit/265b14d6b37c4298bd5556fabcbc37d36f911693", "digest": { "function_hash": "67746179824312076293015561612814260477", "length": 107.0 }, "target": { "file": "src/tool_metalink.c", "function": "SHA1_Final" } }, { "signature_type": "Function", "deprecated": false, "signature_version": "v1", "id": "CURL-CVE-2021-22922-49b3bc54", "source": "https://github.com/curl/curl.git/commit/265b14d6b37c4298bd5556fabcbc37d36f911693", "digest": { "function_hash": "288339340679990695753294133645731315446", "length": 531.0 }, "target": { "file": "src/tool_metalink.c", "function": "nss_hash_init" } }, { "signature_type": "Function", "deprecated": false, "signature_version": "v1", "id": "CURL-CVE-2021-22922-4a586e83", "source": "https://github.com/curl/curl.git/commit/265b14d6b37c4298bd5556fabcbc37d36f911693", "digest": { "function_hash": "195179139587135921782592721500064139009", "length": 1397.0 }, "target": { "file": "src/tool_metalink.c", "function": "new_metalinkfile" } }, { "signature_type": "Function", "deprecated": false, "signature_version": "v1", "id": "CURL-CVE-2021-22922-4e2fe444", "source": "https://github.com/curl/curl.git/commit/265b14d6b37c4298bd5556fabcbc37d36f911693", "digest": { "function_hash": "108950452560195965081140842167613730937", "length": 334.0 }, "target": { "file": "src/tool_metalink.c", "function": "check_hex_digest" } }, { "signature_type": "Function", "deprecated": false, "signature_version": "v1", "id": "CURL-CVE-2021-22922-52f9e2c4", "source": "https://github.com/curl/curl.git/commit/265b14d6b37c4298bd5556fabcbc37d36f911693", "digest": { "function_hash": "152399797865728842535380363815319905621", "length": 243.0 }, "target": { "file": "src/tool_metalink.c", "function": "SHA256_Init" } }, { "signature_type": "Function", "deprecated": false, "signature_version": "v1", "id": "CURL-CVE-2021-22922-5ec923d1", "source": "https://github.com/curl/curl.git/commit/265b14d6b37c4298bd5556fabcbc37d36f911693", "digest": { "function_hash": "269306327515085820487391572297127550331", "length": 168.0 }, "target": { "file": "src/tool_metalink.c", "function": "SHA1_Update" } }, { "signature_type": "Function", "deprecated": false, "signature_version": "v1", "id": "CURL-CVE-2021-22922-6008448d", "source": "https://github.com/curl/curl.git/commit/265b14d6b37c4298bd5556fabcbc37d36f911693", "digest": { "function_hash": "187344378476052215598248159240483486041", "length": 107.0 }, "target": { "file": "src/tool_metalink.c", "function": "SHA256_Final" } }, { "signature_type": "Function", "deprecated": false, "signature_version": "v1", "id": "CURL-CVE-2021-22922-60630df7", "source": "https://github.com/curl/curl.git/commit/265b14d6b37c4298bd5556fabcbc37d36f911693", "digest": { "function_hash": "246675823946755041493861592330255721798", "length": 85.0 }, "target": { "file": "src/tool_metalink.c", "function": "MD5_Init" } }, { "signature_type": "Function", "deprecated": false, "signature_version": "v1", "id": "CURL-CVE-2021-22922-617dd0f0", "source": "https://github.com/curl/curl.git/commit/265b14d6b37c4298bd5556fabcbc37d36f911693", "digest": { "function_hash": "315639894081569891477262681998210980169", "length": 107.0 }, "target": { "file": "src/tool_metalink.c", "function": "SHA1_Final" } }, { "signature_type": "Function", "deprecated": false, "signature_version": "v1", "id": "CURL-CVE-2021-22922-6218e390", "source": "https://github.com/curl/curl.git/commit/265b14d6b37c4298bd5556fabcbc37d36f911693", "digest": { "function_hash": "179950850754984038005569638587938831605", "length": 33294.0 }, "target": { "file": "src/tool_getparam.c", "function": "getparameter" } }, { "signature_type": "Function", "deprecated": false, "signature_version": "v1", "id": "CURL-CVE-2021-22922-65d940b4", "source": "https://github.com/curl/curl.git/commit/265b14d6b37c4298bd5556fabcbc37d36f911693", "digest": { "function_hash": "52752202288364152665880481782987185975", "length": 134.0 }, "target": { "file": "src/tool_metalink.c", "function": "SHA1_Update" } }, { "signature_type": "Function", "deprecated": false, "signature_version": "v1", "id": "CURL-CVE-2021-22922-68614ee5", "source": "https://github.com/curl/curl.git/commit/265b14d6b37c4298bd5556fabcbc37d36f911693", "digest": { "function_hash": "96267366671104960521099354433109958476", "length": 375.0 }, "target": { "file": "src/tool_metalink.c", "function": "win32_crypto_final" } }, { "signature_type": "Function", "deprecated": false, "signature_version": "v1", "id": "CURL-CVE-2021-22922-7a9d27f4", "source": "https://github.com/curl/curl.git/commit/265b14d6b37c4298bd5556fabcbc37d36f911693", "digest": { "function_hash": "163773562018292985696554892087482663801", "length": 75.0 }, "target": { "file": "src/tool_metalink.c", "function": "MD5_Init" } }, { "signature_type": "Function", "deprecated": false, "signature_version": "v1", "id": "CURL-CVE-2021-22922-7b16f379", "source": "https://github.com/curl/curl.git/commit/265b14d6b37c4298bd5556fabcbc37d36f911693", "digest": { "function_hash": "67746179824312076293015561612814260477", "length": 107.0 }, "target": { "file": "src/tool_metalink.c", "function": "SHA1_Final" } }, { "signature_type": "Function", "deprecated": false, "signature_version": "v1", "id": "CURL-CVE-2021-22922-8130d8d7", "source": "https://github.com/curl/curl.git/commit/265b14d6b37c4298bd5556fabcbc37d36f911693", "digest": { "function_hash": "306271041216785656197498445431160307318", "length": 7605.0 }, "target": { "file": "src/tool_operate.c", "function": "post_per_transfer" } }, { "signature_type": "Function", "deprecated": false, "signature_version": "v1", "id": "CURL-CVE-2021-22922-8709dc60", "source": "https://github.com/curl/curl.git/commit/265b14d6b37c4298bd5556fabcbc37d36f911693", "digest": { "function_hash": "304267190580927811579816374163154990940", "length": 86.0 }, "target": { "file": "src/tool_metalink.c", "function": "SHA1_Init" } }, { "signature_type": "Line", "deprecated": false, "signature_version": "v1", "id": "CURL-CVE-2021-22922-8b536e28", "source": "https://github.com/curl/curl.git/commit/265b14d6b37c4298bd5556fabcbc37d36f911693", "digest": { "line_hashes": [ "241439374851682277372722817722675178547", "13330132371571204451477874800779670045", "13413621342764105702997084670812302383", "139071428083321138826550237692081092756", "157031461644290569968903287038931137709", "12927475248534879956982512015111344824", "324076583426127337470997400034792098562", "238107467717335441863146072622438280568", "239072150717871924042814082623438767154", "263098025565089579282008938181854486626" ], "threshold": 0.9 }, "target": { "file": "src/tool_cfgable.h" } }, { "signature_type": "Function", "deprecated": false, "signature_version": "v1", "id": "CURL-CVE-2021-22922-902aa663", "source": "https://github.com/curl/curl.git/commit/265b14d6b37c4298bd5556fabcbc37d36f911693", "digest": { "function_hash": "71807850952645904586787046057946003641", "length": 229.0 }, "target": { "file": "src/tool_metalink.c", "function": "digest_final" } }, { "signature_type": "Function", "deprecated": false, "signature_version": "v1", "id": "CURL-CVE-2021-22922-9444e357", "source": "https://github.com/curl/curl.git/commit/265b14d6b37c4298bd5556fabcbc37d36f911693", "digest": { "function_hash": "293091449799735245906953649790249975566", "length": 1519.0 }, "target": { "file": "src/tool_metalink.c", "function": "parse_metalink" } }, { "signature_type": "Function", "deprecated": false, "signature_version": "v1", "id": "CURL-CVE-2021-22922-9971b663", "source": "https://github.com/curl/curl.git/commit/265b14d6b37c4298bd5556fabcbc37d36f911693", "digest": { "function_hash": "163773562018292985696554892087482663801", "length": 75.0 }, "target": { "file": "src/tool_metalink.c", "function": "SHA256_Init" } }, { "signature_type": "Function", "deprecated": false, "signature_version": "v1", "id": "CURL-CVE-2021-22922-9c02ec15", "source": "https://github.com/curl/curl.git/commit/265b14d6b37c4298bd5556fabcbc37d36f911693", "digest": { "function_hash": "20715632017162971203778263632917693352", "length": 132.0 }, "target": { "file": "src/tool_metalink.c", "function": "metalink_cleanup" } }, { "signature_type": "Function", "deprecated": false, "signature_version": "v1", "id": "CURL-CVE-2021-22922-a02b2a50", "source": "https://github.com/curl/curl.git/commit/265b14d6b37c4298bd5556fabcbc37d36f911693", "digest": { "function_hash": "269306327515085820487391572297127550331", "length": 168.0 }, "target": { "file": "src/tool_metalink.c", "function": "SHA256_Update" } }, { "signature_type": "Line", "deprecated": false, "signature_version": "v1", "id": "CURL-CVE-2021-22922-a0c33999", "source": "https://github.com/curl/curl.git/commit/265b14d6b37c4298bd5556fabcbc37d36f911693", "digest": { "line_hashes": [ "79387178252924926214716391292557433575", "210244206430557606203550904676810231264", "57068326785235119880273968448843507393", "300779492354417916139732742053662583632", "78567645834623461868904735574659521860", "279588413180599668558887332348983793010", "187402178407579497699000216015664232923", "184521990450939379675413059284383971706", "77064929644052734500372029478981220341", "43490025482861613292800614231544936929", "16642340740500859650501106510222658732", "311819190979271638443761576327949240177", "77104543718482621137314270084668966921", "109488346925956251568261654799933431580", "204800243532514610486394656582415889759", "223837195413495477824674968963444691911", "268128392159539011832745044454862701600", "264627385016897289859726106156821729118", "121183675132358364122574001203270812969", "216451411394972218848522953048731508233", "89721336857657530220600604149799436714", "229214984885171959433908432665617455839", "246697803966241326376818785185900419333", "309790037685203249499746645768023495946", "183810476682003393753631200359959304327", "242305417677914265276809337982597428791", "143110612995746411340282669402532129572", "88134457936901078414632286081173751173", "222216516437739376513806218463099731733" ], "threshold": 0.9 }, "target": { "file": "src/tool_getparam.c" } }, { "signature_type": "Function", "deprecated": false, "signature_version": "v1", "id": "CURL-CVE-2021-22922-a229e542", "source": "https://github.com/curl/curl.git/commit/265b14d6b37c4298bd5556fabcbc37d36f911693", "digest": { "function_hash": "319424715794220306804988804463255284557", "length": 107.0 }, "target": { "file": "src/tool_metalink.c", "function": "MD5_Final" } }, { "signature_type": "Function", "deprecated": false, "signature_version": "v1", "id": "CURL-CVE-2021-22922-a35c1cb8", "source": "https://github.com/curl/curl.git/commit/265b14d6b37c4298bd5556fabcbc37d36f911693", "digest": { "function_hash": "238973892944599713221528807369658549726", "length": 1229.0 }, "target": { "file": "src/tool_help.c", "function": "tool_version_info" } }, { "signature_type": "Function", "deprecated": false, "signature_version": "v1", "id": "CURL-CVE-2021-22922-a4e33c83", "source": "https://github.com/curl/curl.git/commit/265b14d6b37c4298bd5556fabcbc37d36f911693", "digest": { "function_hash": "279563217227271160484859235947520332689", "length": 193.0 }, "target": { "file": "src/tool_metalink.c", "function": "digest_update" } }, { "signature_type": "Function", "deprecated": false, "signature_version": "v1", "id": "CURL-CVE-2021-22922-a659317a", "source": "https://github.com/curl/curl.git/commit/265b14d6b37c4298bd5556fabcbc37d36f911693", "digest": { "function_hash": "254852515015798404772376391604725586734", "length": 255.0 }, "target": { "file": "src/tool_metalink.c", "function": "clean_metalink" } }, { "signature_type": "Function", "deprecated": false, "signature_version": "v1", "id": "CURL-CVE-2021-22922-a6da963c", "source": "https://github.com/curl/curl.git/commit/265b14d6b37c4298bd5556fabcbc37d36f911693", "digest": { "function_hash": "184953925847219086996588798635215842919", "length": 263.0 }, "target": { "file": "src/tool_main.c", "function": "main_free" } }, { "signature_type": "Function", "deprecated": false, "signature_version": "v1", "id": "CURL-CVE-2021-22922-af543d77", "source": "https://github.com/curl/curl.git/commit/265b14d6b37c4298bd5556fabcbc37d36f911693", "digest": { "function_hash": "73953063582889921172975905585184540679", "length": 1539.0 }, "target": { "file": "src/tool_metalink.c", "function": "check_hash" } }, { "signature_type": "Line", "deprecated": false, "signature_version": "v1", "id": "CURL-CVE-2021-22922-b1928e91", "source": "https://github.com/curl/curl.git/commit/265b14d6b37c4298bd5556fabcbc37d36f911693", "digest": { "line_hashes": [ "97287148836525285932596801982550713526", "64726806181423230803617952568585520814", "264404302795995062600996636904679832409", "139020344701493086075497680362776515017", "303288578526276973547761594371942113928", "30702022445903688635235556377016811176", "260709110903240582980476929754010224643", "22832535679938257037798384995652928", "131230107576178570373626309554096989620", "26357109724005426397714293480635504025", "324546527388540420875301783452521815012", "245126948475343592790688397333321511408", "306188160431998106813559148898108889843", "306052987761560959743241517413404571860", "126207232854980085837262266518901761809", "244544492023535346594529837195511982618", "156966383596811571587954663180213044620", "274342232844027569161709447234202660706", "310616105623873306283989209317113113318", "63964975060699685160532918851582239177", "155783167314891200315691055097904559356", "282430474674786595882890767289384896705", "188439681118113311159130471264710436884", "136476023501597226523974507837735658982", "192973738746135136650851280753471380602", "69531532575815367798631734540487913752", "264547774215639788517436316464868288801", "3830463668758473469768916496880951297", "12642054800063068958589756729641995763", "37287994333322869598228452110910346494", "216767781601102302637238005485736917532", "153599849470404460558187957138940236680", "152174020540533595415118929541306210420", "293126271483528220167721051897970502993", "116288567065436434367946986825187188768", "79381041544057578807116021912362485945", "195246281173082084198691893358601624056", "137421360001243904250333720635009817831", "316411594399953388567232271804049464311", "54154265144909627224384408933867811645", "143544670478737738976544169269586979373", "297911028311875096472743320212885898227", "111087510477255305304263592507984846673", "236268558953471928476997542522387270770", "146139895522890626850782848320376790459", "78804447007728684511775842755538689427", "84282159926731229246139868484096324291", "217673277585798373973079596322219751497", "75483864540749992172778495822521144738", "32570824884205743811527938365223331948", "339602083984417460021808358194426668729", "131697553135165938577259652074057860194", "19549334656975334759485125357474646577", "257030464822193126607834005735256895229", "12592761449979303112584651280445225191", "292857887541514471253895867091963669650", "109688018903193174310350399477730480316", "168271234578421381271441146258840267608", "217614647985405831646308862283253357331", "120122700767059444437588321470441327442", "253844812341948977591367693310539308558", "160853688087463014969738535773224401377" ], "threshold": 0.9 }, "target": { "file": "src/tool_metalink.h" } }, { "signature_type": "Function", "deprecated": false, "signature_version": "v1", "id": "CURL-CVE-2021-22922-b80e0ef5", "source": "https://github.com/curl/curl.git/commit/265b14d6b37c4298bd5556fabcbc37d36f911693", "digest": { "function_hash": "147131446768292050211531362031936135499", "length": 241.0 }, "target": { "file": "src/tool_metalink.c", "function": "new_metalink_resource" } }, { "signature_type": "Line", "deprecated": false, "signature_version": "v1", "id": "CURL-CVE-2021-22922-b848c11e", "source": "https://github.com/curl/curl.git/commit/265b14d6b37c4298bd5556fabcbc37d36f911693", "digest": { "line_hashes": [ "97329375628960551405761842232841476352", "156317836646674834222099471526654206721", "141421592073082330631124361815763503364", "230989108960438100162179547074135272423", "111175754213289920323428606088167454389" ], "threshold": 0.9 }, "target": { "file": "src/tool_operhlp.c" } }, { "signature_type": "Function", "deprecated": false, "signature_version": "v1", "id": "CURL-CVE-2021-22922-bc0a13c2", "source": "https://github.com/curl/curl.git/commit/265b14d6b37c4298bd5556fabcbc37d36f911693", "digest": { "function_hash": "269306327515085820487391572297127550331", "length": 168.0 }, "target": { "file": "src/tool_metalink.c", "function": "MD5_Update" } }, { "signature_type": "Function", "deprecated": false, "signature_version": "v1", "id": "CURL-CVE-2021-22922-c428ac59", "source": "https://github.com/curl/curl.git/commit/265b14d6b37c4298bd5556fabcbc37d36f911693", "digest": { "function_hash": "130932170071655301798810323924160719533", "length": 136.0 }, "target": { "file": "src/tool_metalink.c", "function": "SHA256_Update" } }, { "signature_type": "Function", "deprecated": false, "signature_version": "v1", "id": "CURL-CVE-2021-22922-c4f66752", "source": "https://github.com/curl/curl.git/commit/265b14d6b37c4298bd5556fabcbc37d36f911693", "digest": { "function_hash": "187344378476052215598248159240483486041", "length": 107.0 }, "target": { "file": "src/tool_metalink.c", "function": "SHA256_Final" } }, { "signature_type": "Function", "deprecated": false, "signature_version": "v1", "id": "CURL-CVE-2021-22922-cd037426", "source": "https://github.com/curl/curl.git/commit/265b14d6b37c4298bd5556fabcbc37d36f911693", "digest": { "function_hash": "52752202288364152665880481782987185975", "length": 134.0 }, "target": { "file": "src/tool_metalink.c", "function": "SHA256_Update" } }, { "signature_type": "Function", "deprecated": false, "signature_version": "v1", "id": "CURL-CVE-2021-22922-cdaf7c69", "source": "https://github.com/curl/curl.git/commit/265b14d6b37c4298bd5556fabcbc37d36f911693", "digest": { "function_hash": "24320126776347728658061384197216945670", "length": 245.0 }, "target": { "file": "src/tool_metalink.c", "function": "hex_to_uint" } }, { "signature_type": "Function", "deprecated": false, "signature_version": "v1", "id": "CURL-CVE-2021-22922-cf958c5e", "source": "https://github.com/curl/curl.git/commit/265b14d6b37c4298bd5556fabcbc37d36f911693", "digest": { "function_hash": "130932170071655301798810323924160719533", "length": 136.0 }, "target": { "file": "src/tool_metalink.c", "function": "MD5_Update" } }, { "signature_type": "Function", "deprecated": false, "signature_version": "v1", "id": "CURL-CVE-2021-22922-cfd10313", "source": "https://github.com/curl/curl.git/commit/265b14d6b37c4298bd5556fabcbc37d36f911693", "digest": { "function_hash": "291976319627268393274664515127573682560", "length": 240.0 }, "target": { "file": "src/tool_metalink.c", "function": "MD5_Init" } }, { "signature_type": "Function", "deprecated": false, "signature_version": "v1", "id": "CURL-CVE-2021-22922-d7eb34a9", "source": "https://github.com/curl/curl.git/commit/265b14d6b37c4298bd5556fabcbc37d36f911693", "digest": { "function_hash": "133358418639074224033514834157058800284", "length": 99.0 }, "target": { "file": "src/tool_metalink.c", "function": "check_metalink_content_type" } }, { "signature_type": "Function", "deprecated": false, "signature_version": "v1", "id": "CURL-CVE-2021-22922-dbb6ae62", "source": "https://github.com/curl/curl.git/commit/265b14d6b37c4298bd5556fabcbc37d36f911693", "digest": { "function_hash": "316087250086521550471036242169131958003", "length": 376.0 }, "target": { "file": "src/tool_metalink.c", "function": "check_content_type" } }, { "signature_type": "Function", "deprecated": false, "signature_version": "v1", "id": "CURL-CVE-2021-22922-de4bc808", "source": "https://github.com/curl/curl.git/commit/265b14d6b37c4298bd5556fabcbc37d36f911693", "digest": { "function_hash": "91177888497085686454931240543792390458", "length": 442.0 }, "target": { "file": "src/tool_metalink.c", "function": "metalink_write_cb" } }, { "signature_type": "Function", "deprecated": false, "signature_version": "v1", "id": "CURL-CVE-2021-22922-e428f741", "source": "https://github.com/curl/curl.git/commit/265b14d6b37c4298bd5556fabcbc37d36f911693", "digest": { "function_hash": "248209945950638560717540747963699107938", "length": 241.0 }, "target": { "file": "src/tool_metalink.c", "function": "SHA1_Init" } }, { "signature_type": "Function", "deprecated": false, "signature_version": "v1", "id": "CURL-CVE-2021-22922-ea454d08", "source": "https://github.com/curl/curl.git/commit/265b14d6b37c4298bd5556fabcbc37d36f911693", "digest": { "function_hash": "149078570263623886759181464701461970268", "length": 88.0 }, "target": { "file": "src/tool_metalink.c", "function": "SHA256_Init" } }, { "signature_type": "Function", "deprecated": false, "signature_version": "v1", "id": "CURL-CVE-2021-22922-f695f83d", "source": "https://github.com/curl/curl.git/commit/265b14d6b37c4298bd5556fabcbc37d36f911693", "digest": { "function_hash": "128909149847859750699908866058134727373", "length": 210.0 }, "target": { "file": "src/tool_metalink.c", "function": "nss_hash_final" } }, { "signature_type": "Function", "deprecated": false, "signature_version": "v1", "id": "CURL-CVE-2021-22922-f7012089", "source": "https://github.com/curl/curl.git/commit/265b14d6b37c4298bd5556fabcbc37d36f911693", "digest": { "function_hash": "209457163689048033446328017305530445718", "length": 273.0 }, "target": { "file": "src/tool_metalink.c", "function": "delete_metalinkfile" } }, { "signature_type": "Line", "deprecated": false, "signature_version": "v1", "id": "CURL-CVE-2021-22922-f7073345", "source": "https://github.com/curl/curl.git/commit/265b14d6b37c4298bd5556fabcbc37d36f911693", "digest": { "line_hashes": [ "19318584049199553501034941466890827893", "337266741760299040662356215704855878283", "293411650613058501575613763079526162644", "160458653141329141546485710168954925239", "111974449977945857767186534688432488456", "180708654240306181487317678409861952468", "248239542150243816024257604187800713351", "187849425905185603999092069989197880927" ], "threshold": 0.9 }, "target": { "file": "src/tool_operate.h" } }, { "signature_type": "Function", "deprecated": false, "signature_version": "v1", "id": "CURL-CVE-2021-22922-fa63b7de", "source": "https://github.com/curl/curl.git/commit/265b14d6b37c4298bd5556fabcbc37d36f911693", "digest": { "function_hash": "334605906285784728919943714678998723745", "length": 421.0 }, "target": { "file": "src/tool_metalink.c", "function": "metalink_check_hash" } }, { "signature_type": "Function", "deprecated": false, "signature_version": "v1", "id": "CURL-CVE-2021-22922-fb3c6d8e", "source": "https://github.com/curl/curl.git/commit/265b14d6b37c4298bd5556fabcbc37d36f911693", "digest": { "function_hash": "15385691806024909932715490449707902857", "length": 107.0 }, "target": { "file": "src/tool_metalink.c", "function": "SHA256_Final" } }, { "signature_type": "Function", "deprecated": false, "signature_version": "v1", "id": "CURL-CVE-2021-22922-ffb6e090", "source": "https://github.com/curl/curl.git/commit/265b14d6b37c4298bd5556fabcbc37d36f911693", "digest": { "function_hash": "8924541726257673233468846886309214403", "length": 989.0 }, "target": { "file": "src/tool_operate.c", "function": "serial_transfers" } } ] }