[php-src] PR #25170: Clear CURLOPT_PRIVATE in curl_reset()
| From: | lacatoire | Date: | Tue, 03 Nov 2026 09:47:37 +0000 |
| Subject: | [php-src] PR #25170: Clear CURLOPT_PRIVATE in curl_reset() | ||
| Groups: | php.git-pulls | ||
| Request: | Send a blank email to git-pulls+get-40258@lists.php.net to get a copy of this message | ||
Pull Request: https://github.com/php/php-src/pull/25170
Author: lacatoire
CURLOPT_PRIVATE is stored on the PHP side only, so curl_easy_reset() does
not clear it and a reset handle still returns the old value. Clear it in curl_reset().
### To reproduce
```php
<?php
$ch = curl_init();
curl_setopt($ch, CURLOPT_PRIVATE, "secret-marker");
curl_reset($ch);
var_dump(curl_getinfo($ch, CURLINFO_PRIVATE));
```
Before (PHP 8.4.26): string(13) "secret-marker"
After: bool(false)