Infinite loop in curl_fnmatch

[cmeister2]

I did this

This sample code hits an infinite loop in curl_fnmatch.c

#include <curl/curl.h>

int main(int argc, char *argv[])
{
  CURLcode ret;
  CURL *hnd;

  hnd = curl_easy_init();
  curl_easy_setopt(hnd, CURLOPT_URL, "ftp://test.rebex.net/[*\\s-'tl");
  curl_easy_setopt(hnd, CURLOPT_VERBOSE, 1L);
  curl_easy_setopt(hnd, CURLOPT_USERPWD, "demo:password");
  curl_easy_setopt(hnd, CURLOPT_WILDCARDMATCH, 1L);

  ret = curl_easy_perform(hnd);

  curl_easy_cleanup(hnd);
  hnd = NULL;

  return (int)ret;
}

This problem does not exist in the curl tool because this is rejected by tool_urlglob.c.

Discovered by OSS-Fuzz: https://oss-fuzz.com/v2/testcase-detail/4564121254100992