escape_utils 0.2.0 → 0.2.1

data/CHANGELOG.md

@@ -1,5 +1,8 @@
 # Changelog
 
+## 0.2.1 (February 21st, 2011)
+* fix buffer over read in unescape_url and unescape_uri
+
 ## 0.2.0 (February 8th, 2011)
 * fixed a couple of compilation warnings on 1.9.3
 * moved to rspec2

data/ext/escape_utils/escape_utils.c

@@ -233,6 +233,7 @@ static size_t unescape_url(unsigned char *out, const unsigned char *in, size_t i
       if (IS_HEX(*in) && IS_HEX(*(in+1))) {
         *out++ = (UNHEX(*in) << 4) + UNHEX(*(in+1));
         in+=2;
+        len-=2;
         total-=2;
       } else {
         /* incomplete escape, pass it through */
@@ -283,6 +284,7 @@ static size_t unescape_uri(unsigned char *out, const unsigned char *in, size_t i
       if (IS_HEX(*in) && IS_HEX(*(in+1))) {
         *out++ = (UNHEX(*in) << 4) + UNHEX(*(in+1));
         in+=2;
+        len-=2;
         total-=2;
       } else {
         /* incomplete escape, pass it through */
@@ -622,13 +624,11 @@ static VALUE rb_unescape_uri(VALUE self, VALUE str) {
   return rb_output_buf;
 }
 
-static VALUE rb_s_get_html_secure(VALUE self)
-{
+static VALUE rb_s_get_html_secure(VALUE self) {
   return rb_cvar_get(self, rb_html_secure);
 }
 
-static VALUE rb_s_set_html_secure(VALUE self, VALUE val)
-{
+static VALUE rb_s_set_html_secure(VALUE self, VALUE val) {
   html_secure = RTEST(val);
   rb_cvar_set(self, rb_html_secure, val);
 

data/lib/escape_utils/version.rb

@@ -1,3 +1,3 @@
 module EscapeUtils
-  VERSION = "0.2.0"
+  VERSION = "0.2.1"
 end

metadata

@@ -1,13 +1,13 @@
 --- !ruby/object:Gem::Specification 
 name: escape_utils
 version: !ruby/object:Gem::Version 
-  hash: 23
+  hash: 21
   prerelease: 
   segments: 
   - 0
   - 2
-  - 0
-  version: 0.2.0
+  - 1
+  version: 0.2.1
 platform: ruby
 authors: 
 - Brian Lopez
@@ -15,7 +15,7 @@ autorequire:
 bindir: bin
 cert_chain: []
 
-date: 2011-02-08 00:00:00 -08:00
+date: 2011-02-21 00:00:00 -08:00
 default_executable: 
 dependencies: 
 - !ruby/object:Gem::Dependency 
@@ -136,7 +136,6 @@ files:
 - MIT-LICENSE
 - README.rdoc
 - Rakefile
-- VERSION
 - benchmark/html_escape.rb
 - benchmark/html_unescape.rb
 - benchmark/javascript_escape.rb

data/VERSION

@@ -1 +0,0 @@
-0.1.9