crtxcr
/
cgitsb
1
0
複製 0
程式碼 問題管理 合併請求 版本發佈 Wiki Activity

html: fix strcpy bug in convert_query_hexchar 

The source and destination strings in strcpy() may not overlap.
Instead, use memmove(), which allows overlap.  This fixes test t0104,
where 'url=foo%2bbar/tree' was being parsed improperly.

Signed-off-by: Mark Lodato <lodatom@gmail.com>
This commit is contained in:
Mark Lodato 2010-08-27 21:02:27 -04:00 committed by Lars Hjemli
父節點 c94414a4c8
當前提交 48434780ca
共有 1 個文件被更改，包括 5 次插入 和 4 次删除
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
html.c
查看文件

@ -240,19 +240,20 @@ int hextoint(char c)
char *convert_query_hexchar(char *txt) char *convert_query_hexchar(char *txt)
{ {
int d1, d2; int d1, d2, n;
if (strlen(txt) < 3) { n = strlen(txt);
if (n < 3) {
*txt = '\0'; *txt = '\0';
return txt-1; return txt-1;
} }
d1 = hextoint(*(txt+1)); d1 = hextoint(*(txt+1));
d2 = hextoint(*(txt+2)); d2 = hextoint(*(txt+2));
if (d1<0 || d2<0) { if (d1<0 || d2<0) {
strcpy(txt, txt+3); memmove(txt, txt+3, n-3);
return txt-1; return txt-1;
} else { } else {
*txt = d1 * 16 + d2; *txt = d1 * 16 + d2;
strcpy(txt+1, txt+3); memmove(txt+1, txt+3, n-2);
return txt; return txt;
} }
} }