Page MenuHomeFreeBSD

D60008.id187651.diff
No OneTemporary

D60008.id187651.diff

diff --git a/lib/libfetch/fetch.c b/lib/libfetch/fetch.c
--- a/lib/libfetch/fetch.c
+++ b/lib/libfetch/fetch.c
@@ -347,7 +347,7 @@
fetchParseURL(const char *URL)
{
char *doc;
- const char *p, *q;
+ const char *p, *q, *r;
struct url *u;
int i, n;
@@ -385,12 +385,18 @@
q = fetch_pctdecode(u->user, URL, URL_USERLEN);
if (q == NULL)
goto ouch;
+ for (r = u->user; *r != '\0'; r++)
+ if (!isprint((unsigned char)*r))
+ goto ouch;
/* password */
if (*q == ':') {
q = fetch_pctdecode(u->pwd, q + 1, URL_PWDLEN);
if (q == NULL)
goto ouch;
+ for (r = u->pwd; *r != '\0'; r++)
+ if (!isprint((unsigned char)*r))
+ goto ouch;
}
p++;
} else {

File Metadata

Mime Type
text/plain
Expires
Sat, Sep 26, 6:21 PM (9 h, 33 m)
Storage Engine
blob
Storage Format
Raw Data
Storage Handle
39658830
Default Alt Text
D60008.id187651.diff (698 B)

Event Timeline