From: Matthew DeVore Date: Tue, 04 Jun 2019 17:23:52 GMT Subject: Re: [PATCH 2/2] url: do not allow %00 to represent NULL in URLs Message-ID: <20190604172352.GK4641@comcast.net> In-Reply-To: On Tue, Jun 04, 2019 at 07:01:01AM +0200, René Scharfe wrote: > It's a bit hard to see with the (extended, but still) limited context, > but url_decode_internal() effectively returns a NUL-terminated string, > even though it does use a strbuf parameter named "out" for temporary > storage. So callers really have no use for decoded NULs, and this > change thus makes sense to me. > That was more or less my train of thought as well. Thank you for taking a look.