From: Frank Denis <chrysalis@users.sourceforge.net>
Date: Mon, 3 May 2010 15:29:22 +0000 (-0400)
Subject: Refuse null keys in evhttp_parse_query()
X-Git-Tag: release-2.0.5-beta~27
X-Git-Url: https://granicus.if.org/sourcecode?a=commitdiff_plain;h=953e2290fc9a649c465d5bcc7b26bdb0d5693c3b;p=libevent

Refuse null keys in evhttp_parse_query()

evhttp_parse_query() currently accepts empty keys, that don't make any
sense.

-Frank

[From sourceforge patch 2995183]
-Nick
---

diff --git a/http.c b/http.c
index c92f60fc..53943c78 100644
--- a/http.c
+++ b/http.c
@@ -2335,7 +2335,7 @@ evhttp_parse_query(const char *uri, struct evkeyvalq *headers)
 
 		value = argument;
 		key = strsep(&value, "=");
-		if (value == NULL)
+		if (value == NULL || *key == '\0')
 			goto error;
 
 		if ((decoded_value = mm_malloc(strlen(value) + 1)) == NULL) {