mirrors/libmicrohttpd
2
0
Fork 0
mirror of https://git.gnunet.org/libmicrohttpd.git synced 2026-09-25 04:09:31 +03:00
Code Issues Packages Projects Releases Wiki Activity

use proper guards to avoid (theoretical) off-by-one in pct decoding

Browse Source
This commit is contained in:
Christian Grothoff
2026-07-08 11:42:33 +02:00
parent 2a6420de23
commit 04547cd9c8
1 changed files with 4 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/microhttpd/mhd_str.c
+4 -6
View File
@@ -1773,9 +1773,8 @@ MHD_str_pct_decode_strict_n_ (const char *pct_encoded,
const char chr = pct_encoded[r];
if ('%' == chr)
{
if (2 > pct_encoded_len - r)
if (3 > pct_encoded_len - r)
return 0;
else
{
const char c1 = pct_encoded[++r];
const char c2 = pct_encoded[++r];
@@ -1805,9 +1804,8 @@ MHD_str_pct_decode_strict_n_ (const char *pct_encoded,
return 0;
if ('%' == chr)
{
if (2 > pct_encoded_len - r)
if (3 > pct_encoded_len - r)
return 0;
else
{
const char c1 = pct_encoded[++r];
const char c2 = pct_encoded[++r];
@@ -1853,7 +1851,7 @@ MHD_str_pct_decode_lenient_n_ (const char *pct_encoded,
const char chr = pct_encoded[r];
if ('%' == chr)
{
if (2 > pct_encoded_len - r)
if (3 > pct_encoded_len - r)
{
if (NULL != broken_encoding)
*broken_encoding = true;
@@ -1897,7 +1895,7 @@ MHD_str_pct_decode_lenient_n_ (const char *pct_encoded,
return 0;
if ('%' == chr)
{
if (2 > pct_encoded_len - r)
if (3 > pct_encoded_len - r)
{
if (NULL != broken_encoding)
*broken_encoding = true;