changeset 25795:e96b4070ba66

Clear tmp between ip6 check and string escape to prevent reuse of the buffer, in order to prevent a possible buffer overflow on malformed urls. Based on a patch by Adam Bozanich abozanich musecurity com
author rtogni
date Sun, 20 Jan 2008 20:43:46 +0000
parents 2c8cdb9123b8
children b771a94d94a7
files stream/url.c
diffstat 1 files changed, 1 insertions(+), 0 deletions(-) [+]
line wrap: on
line diff
--- a/stream/url.c	Sun Jan 20 17:16:39 2008 +0000
+++ b/stream/url.c	Sun Jan 20 20:43:46 2008 +0000
@@ -328,6 +328,7 @@
 		}
 	}
 	
+	tmp = NULL;
 	while(i < len) {
 		// look for the next char that must be kept
 		for  (j=i;j<len;j++) {