[PATCH v2 0/2] Harden url.c URL-decoding logic
- From
Matthew DeVore <matvore@google.com>
- Date
- Jun 4, 2019, 17:57 UTC
- Message-ID
- <cover.1559670300.git.matvore@google.com>
This roll-up includes simple but important fixes from Brian Carlson and René Scharfe.
- fix typo of "NUL" in commit heading - re-enable %-decoding in non-NULL-terminated strings
Matthew DeVore (2): url: do not read past end of buffer url: do not allow %00 to represent NUL in URLs
url.c | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-)
-- 2.21.0