uh_unescape(): More security

Signed-off-by: Jianhui Zhao <jianhuizhao329@gmail.com>
2017-11-29 14:48:50 +08:00 · 2017-11-29 14:48:50 +08:00 · b0c3acbc13
parent bec72d277d
commit b0c3acbc13
1 changed files with 1 additions and 1 deletions
--- a/src/uhttp.c
+++ b/src/uhttp.c
@ -575,7 +575,7 @@ int uh_unescape(const char *str, int len, char *out, int olen)
    const char *p = str;
    char *o = out;

-    assert(str && out);
+    assert(str && out && olen > 1);

    olen -= 1;