D60008.id.diff
No OneTemporary
Actions

Size

696 B

Referenced Files

None

Subscribers

None

D60008.id.diff
View Options

	diff --git a/lib/libfetch/fetch.c b/lib/libfetch/fetch.c
	--- a/lib/libfetch/fetch.c
	+++ b/lib/libfetch/fetch.c
	@@ -347,7 +347,7 @@
	fetchParseURL(const char *URL)
	{
	char *doc;
	- const char p, q;
	+ const char p, q, *r;
	struct url *u;
	int i, n;

	@@ -385,12 +385,18 @@
	q = fetch_pctdecode(u->user, URL, URL_USERLEN);
	if (q == NULL)
	goto ouch;
	+ for (r = u->user; *r != '\0'; r++)
	+ if (iscntrl((unsigned char)*r))
	+ goto ouch;

	/* password */
	if (*q == ':') {
	q = fetch_pctdecode(u->pwd, q + 1, URL_PWDLEN);
	if (q == NULL)
	goto ouch;
	+ for (r = u->pwd; *r != '\0'; r++)
	+ if (iscntrl((unsigned char)*r))
	+ goto ouch;
	}
	p++;
	} else {