mirror of
https://github.com/moparisthebest/curl
synced 2024-12-22 08:08:50 -05:00
curl_unescape() could make a buffer overflow
This commit is contained in:
parent
bc5c4b8953
commit
211b9e552d
@ -47,7 +47,7 @@
|
||||
|
||||
char *curl_escape(char *string)
|
||||
{
|
||||
int alloc=strlen(string);
|
||||
int alloc=strlen(string)+1;
|
||||
char *ns = malloc(alloc);
|
||||
unsigned char in;
|
||||
int newlen = alloc;
|
||||
@ -83,7 +83,7 @@ char *curl_escape(char *string)
|
||||
|
||||
char *curl_unescape(char *string)
|
||||
{
|
||||
int alloc = strlen(string);
|
||||
int alloc = strlen(string)+1;
|
||||
char *ns = malloc(alloc);
|
||||
unsigned char in;
|
||||
int index=0;
|
||||
|
Loading…
Reference in New Issue
Block a user