# HG changeset patch # User rtogni # Date 1200861826 0 # Node ID e96b4070ba66d1f015e099a6b095c948aca450f7 # Parent 2c8cdb9123b8d667ce70cd88a945d72bee9fba42 Clear tmp between ip6 check and string escape to prevent reuse of the buffer, in order to prevent a possible buffer overflow on malformed urls. Based on a patch by Adam Bozanich abozanich musecurity com diff -r 2c8cdb9123b8 -r e96b4070ba66 stream/url.c --- a/stream/url.c Sun Jan 20 17:16:39 2008 +0000 +++ b/stream/url.c Sun Jan 20 20:43:46 2008 +0000 @@ -328,6 +328,7 @@ } } + tmp = NULL; while(i < len) { // look for the next char that must be kept for (j=i;j