D 2010-05-12T14:56:31
J comment <verbatim>\r\nfossil\stest-urlparser\shttp://donkey.vernier.se/~fossil/picmidi\r\ncorrectly\sparses\sand\sgenerates\shttp://donkey.vernier.se/%7Efossil/picmidi,\swhich\sis\sstored\sin\sthe\sfossil.\r\n\r\nOn\sloading\sthe\sremote-url\sfor\ssync,\spull,\spush,\sor\smerely\sdisplay,\sthis\sis\spassed\sthrough\surl_parse\sagain,\swith\sdevastating\sresults:\r\n\r\nfossil\stest-urlparser\shttp://donkey.vernier.se/%7Efossil/picmidi\r\ng.urlPath\s\s\s\s\s\s=\s/-1.094057E-02fossil/picmidi\r\n\r\nI\sbelieve\sthe\sfailing\sline\sis\sin\ssrc/url.c:\r\n\s\s\s\sg.urlPath\s=\smprintf(&zUrl[i]);\r\n</verbatim>
J foundin b24b2e1bba
J private_contact e8353b1e9ee35f57daacf6c405daaabdd612486a
J severity Severe
J status Open
J title url_parse\spasses\spaths\sthrough\smprintf,\sbreaking\s%\sencoding\s(thus\s~\stoo)
J type Code_Defect
K c198af688022e3781e69a27d27bc78b03e1fbd5b
U anonymous
Z f79550a5ed096e55a982d533d69672e4