Due to a mistake in libcurl's WebSocket code, malicious server can send a particularly crafted packet which makes libcurl get trapped an endless busy-loop. There is no other way for the application escape or exit this loop other than killing thread/process. This might be used DoS libcurl-using application.