From a31d88c7b3d907952d9b5ae214d382b48e17ee45 Mon Sep 17 00:00:00 2001 From: "Albert S." Date: Mon, 3 Nov 2025 18:13:08 +0100 Subject: [PATCH] utils: urldecode: Fix bounds check Sigh... --- utils.cpp | 7 ++++--- 1 file changed, 4 insertions(+), 3 deletions(-) diff --git a/utils.cpp b/utils.cpp index 0193b6c..e1cb3ed 100644 --- a/utils.cpp +++ b/utils.cpp @@ -63,11 +63,12 @@ std::string utils::html_xss(std::string_view str) std::string utils::urldecode(std::string_view str) { std::string result; - int size = str.length(); - for(int i = 0; i < size; i++) + size_t size = str.length(); + for(size_t i = 0; i < size; i++) { char c = str[i]; - if(c == '%' && (size - i > 1)) + + if(c == '%' && i + 2 < size) { char h[3]; h[0] = str[i + 1];