1
0
mirror of https://github.com/moparisthebest/curl synced 2024-12-24 00:58:48 -05:00

urlapi: fix URL encoding when setting a full URL

This commit is contained in:
Daniel Stenberg 2019-10-01 09:53:28 +02:00
parent 54c622aa8e
commit 2c20109a9b
No known key found for this signature in database
GPG Key ID: 5CC908FDB71E12C2

View File

@ -851,6 +851,16 @@ static CURLUcode seturl(const char *url, CURLU *u, unsigned int flags)
if(junkscan(path))
return CURLUE_MALFORMED_INPUT;
if((flags & CURLU_URLENCODE) && path[0]) {
/* worst case output length is 3x the original! */
char *newp = malloc(strlen(path) * 3);
if(!newp)
return CURLUE_OUT_OF_MEMORY;
path_alloced = TRUE;
strcpy_url(newp, path, TRUE); /* consider it relative */
path = newp;
}
fragment = strchr(path, '#');
if(fragment)
*fragment++ = 0;
@ -865,11 +875,16 @@ static CURLUcode seturl(const char *url, CURLU *u, unsigned int flags)
else if(!(flags & CURLU_PATH_AS_IS)) {
/* sanitise paths and remove ../ and ./ sequences according to RFC3986 */
char *newp = Curl_dedotdotify(path);
if(!newp)
if(!newp) {
if(path_alloced)
free(path);
return CURLUE_OUT_OF_MEMORY;
}
if(strcmp(newp, path)) {
/* if we got a new version */
if(path_alloced)
free(path);
path = newp;
path_alloced = TRUE;
}