check that %-quotes are followed by two hex digits
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@11509 ec53bebd-3082-4978-b11e-865c3cabbd6b
This commit is contained in:
@@ -493,7 +493,7 @@ de_http(char *buf)
|
|||||||
{
|
{
|
||||||
char *p, *q;
|
char *p, *q;
|
||||||
for(p = q = buf; *p; p++, q++) {
|
for(p = q = buf; *p; p++, q++) {
|
||||||
if(*p == '%') {
|
if(*p == '%' && isxdigit(p[1]) && isxdigit(p[2])) {
|
||||||
unsigned int x;
|
unsigned int x;
|
||||||
if(sscanf(p + 1, "%2x", &x) != 1)
|
if(sscanf(p + 1, "%2x", &x) != 1)
|
||||||
return -1;
|
return -1;
|
||||||
|
Reference in New Issue
Block a user