check that %-quotes are followed by two hex digits

git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@11509 ec53bebd-3082-4978-b11e-865c3cabbd6b
2002-10-21 15:12:59 +00:00
parent b411502ebe
commit 6dc8410423
1 changed files with 1 additions and 1 deletions
--- a/kdc/connect.c
+++ b/kdc/connect.c
@@ -493,7 +493,7 @@ de_http(char *buf)
 {
    char *p, *q;
    for(p = q = buf; *p; p++, q++) {
-	if(*p == '%') {
+	if(*p == '%' && isxdigit(p[1]) && isxdigit(p[2])) {
 	    unsigned int x;
 	    if(sscanf(p + 1, "%2x", &x) != 1)
 		return -1;