izzy/RetroArch
0
0
Fork 0
mirror of https://github.com/izzy2lost/RetroArch.git synced 2026-03-26 16:42:27 -07:00
Code Issues Packages Projects Releases Wiki Activity

fix buffer overflow in url encoding (affecting msvc2010/2013)

Browse Source
This commit is contained in:
Brad Parker
2018-05-03 12:56:56 -04:00
parent 803373bb09
commit 05404f9104
2 changed files with 16 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
libretro-common/compat/compat_snprintf.c
+8 -2
View File
@@ -55,13 +55,19 @@ int c99_vsnprintf_retro__(char *outBuf, size_t size, const char *format, va_list
if (size != 0)
#if (_MSC_VER <= 1310)
count = _vsnprintf(outBuf, size, format, ap);
count = _vsnprintf(outBuf, size - 1, format, ap);
#else
count = _vsnprintf_s(outBuf, size, _TRUNCATE, format, ap);
count = _vsnprintf_s(outBuf, size, size - 1, format, ap);
#endif
if (count == -1)
count = _vscprintf(format, ap);
if (count == size)
{
/* there was no room for a NULL, so truncate the last character */
outBuf[size - 1] = '\0';
}
return count;
}
libretro-common/net/net_http.c
+8 -2
View File
@@ -109,6 +109,7 @@ void net_http_urlencode(char **dest, const char *source)
char *enc = NULL;
/* Assume every character will be encoded, so we need 3 times the space. */
size_t len = strlen(source) * 3 + 1;
size_t count = len;
if (!urlencode_lut_inited)
urlencode_lut_init();
@@ -119,11 +120,16 @@ void net_http_urlencode(char **dest, const char *source)
for (; *source; source++)
{
int written = 0;
/* any non-ascii character will just be encoded without question */
if ((unsigned)*source < sizeof(urlencode_lut) && urlencode_lut[(unsigned)*source])
snprintf(enc, len, "%c", urlencode_lut[(unsigned)*source]);
written = snprintf(enc, count, "%c", urlencode_lut[(unsigned)*source]);
else
snprintf(enc, len, "%%%02X", *source & 0xFF);
written = snprintf(enc, count, "%%%02X", *source & 0xFF);
if (written > 0)
count -= written;
while (*++enc);
}