From b0c3acbc13c43b35c1e27613929ae74fc9556bb4 Mon Sep 17 00:00:00 2001 From: Jianhui Zhao Date: Wed, 29 Nov 2017 14:48:50 +0800 Subject: [PATCH] uh_unescape(): More security Signed-off-by: Jianhui Zhao --- src/uhttp.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/uhttp.c b/src/uhttp.c index 64b813e..fa12b88 100755 --- a/src/uhttp.c +++ b/src/uhttp.c @@ -575,7 +575,7 @@ int uh_unescape(const char *str, int len, char *out, int olen) const char *p = str; char *o = out; - assert(str && out); + assert(str && out && olen > 1); olen -= 1;