Re: [Bug-wget] [PATCH] the libidn problem

[Ander Juaristi]

On 06/30/2015 02:47 PM, Tim Ruehsen wrote:
> Thanks Hubert, good catch.
>
> I add the amended patch for completeness.
>
> Tim

Hi Tim,

I amended some enhancements on top of your patch.

 - Check sequences of length 5 and 6. I don't see any reason not to check them.
 - Removed the call to quote() at idn_encode() since it segfaults with 0xFC 
(the same test proposed by the reporters of #45236).
 - General reworking to avoid code repetition.

It fixes #45236 and passes all the tests.

--
Regards,
- AJ

0001-Work-around-a-libidn-1.30-vulnerability.patch
Description: Text Data