Handling of .netrc entries with username / password longer than 128 characters broken in 8.11.0

[moha-gh]

I did this

Following the update to 8.11.0, we are seeing .netrc parser errors, similar to what is reported in #15496. The fix for that issue however did not work for us. We've narrowed to issue down to entries with usernames and/or passwords that are longer than 128 characters (short-lived tokens in our case).

Root cause seems to be https://github.com/curl/curl/blame/3b43a05e000aa8f65bda513f733a73fefe35d5ca/lib/netrc.c#L115C25-L115C40, which reduced the maximum token size from 4096 (https://github.com/curl/curl/blame/962097b8dd44ed5b9e7984bc1cdffdbdd566857f/lib/netrc.c#L86C10-L86C10) to 128.

I expected the following

.netrc files with longer passwords / usernames are parsed correctly.

curl/libcurl version

curl 8.11.0 (x86_64-alpine-linux-musl) libcurl/8.11.0 OpenSSL/3.3.2 zlib/1.3.1 brotli/1.1.0 zstd/1.5.6 c-ares/1.33.1 libidn2/2.3.7 libpsl/0.21.5 nghttp2/1.62.1
Release-Date: 2024-11-06
Protocols: dict file ftp ftps gopher gophers http https imap imaps ipfs ipns mqtt pop3 pop3s rtsp smb smbs smtp smtps telnet tftp ws wss
Features: alt-svc AsynchDNS brotli HSTS HTTP2 HTTPS-proxy IDN IPv6 Largefile libz NTLM PSL SSL threadsafe TLS-SRP UnixSockets zstd

operating system

Alpine Linux 3.20

[moha-gh]

@bagder : Thanks a lot for the quick fix ❤️