git/list[1] front-page[2] threads[3] people[4] search[5] about
 

[PATCH v2 0/2] Harden url.c URL-decoding logic

From
Matthew DeVore <matvore@google.com>
Date
Jun 4, 2019, 17:57 UTC
Message-ID
<cover.1559670300.git.matvore@google.com>

This roll-up includes simple but important fixes from Brian Carlson and René Scharfe.

 - fix typo of "NUL" in commit heading
 - re-enable %-decoding in non-NULL-terminated strings
Matthew DeVore (2):
  url: do not read past end of buffer
  url: do not allow %00 to represent NUL in URLs
 url.c | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)
-- 
2.21.0
Next: Matthew DeVore
Message 1 of 5 in “Harden url.c URL-decoding logic”
  1. 0/2 Harden url.c URL-decoding logicMatthew DeVore, Jun 4, 2019
  2. 1/2 url: do not read past end of bufferMatthew DeVore, Jun 4, 2019
  3. Junio C HamanoJun 4, 2019
  4. 2/2 url: do not allow %00 to represent NUL in URLsMatthew DeVore, Jun 4, 2019
  5. Matthew DeVoreJun 4, 2019

Read the whole thread, see it on lore, or plain text.

$ cat FOOTERMessages come from the public archive at lore.kernel.org/git, fetched every hour. The front page is chosen and written each morning by an AI editor and can be wrong; the threads themselves are the record. About and API. For agents: an MCP server at https://gitlist.dev/mcp, and any thread, story or person page as Markdown by adding .md to its URL (or sending Accept: text/markdown). Details in /llms.txt.