romenskiy2012/curl
1
0
Fork 0
mirror of https://github.com/curl/curl.git synced 2026-04-15 06:41:42 +03:00
Code Issues Projects Releases Packages Wiki Activity

curl_unescape() did not stop at the set length properly when %-codes were

Browse source 
used
This commit is contained in:
Daniel Stenberg 2000-11-21 19:01:53 +00:00
parent 2c123051bb
commit b734bc37eb
1 changed files with 2 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

3
lib/escape.c
View file

@ -100,7 +100,7 @@ char *curl_unescape(char *string, int length)
the "query part" where '+' should become ' '.
RFC 2316, section 3.10 */
while(--alloc) {
while(--alloc > 0) {
in = *string;
if(querypart && ('+' == in))
in = ' ';
@ -113,6 +113,7 @@ char *curl_unescape(char *string, int length)
if(sscanf(string+1, "%02X", &hex)) {
in = hex;
string+=2;
alloc-=2;
}
}