From: Ilia Alshanetsky <iliaa@php.net>
Date: Thu, 26 May 2005 03:56:21 +0000 (+0000)
Subject: Added scheme validation for parse_url().
X-Git-Tag: php-5.0.1b1~166
X-Git-Url: https://granicus.if.org/sourcecode?a=commitdiff_plain;h=fddaa54410f7cbc4a3241f5a58efc2111596a662;p=php

Added scheme validation for parse_url().
---

diff --git a/ext/standard/url.c b/ext/standard/url.c
index 63c5f60dd5..4d07d249bb 100644
--- a/ext/standard/url.c
+++ b/ext/standard/url.c
@@ -104,6 +104,19 @@ PHPAPI php_url *php_url_parse_ex(char const *str, int length)
 
 	/* parse scheme */
 	if ((e = memchr(s, ':', length)) && (e - s)) {
+		/* validate scheme */
+		p = s;
+		while (p < e) {
+			if (!isalnum(*p)) {
+				if (e + 1 < ue) {
+					goto parse_port;
+				} else {
+					goto just_path;
+				}
+			}
+			p++;
+		}
+	
 		if (*(e + 1) == '\0') { /* only scheme is available */
 			ret->scheme = estrndup(s, (e - s));
 			php_replace_controlchars_ex(ret->scheme, (e - s));