[jira] Updated: (SANTUARIO-72) unescaping of escaped percent (%25) fails

["Scott Cantor (JIRA)" <ji...@apache.org>]

     [ https://issues.apache.org/jira/browse/SANTUARIO-72?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Scott Cantor updated SANTUARIO-72:
----------------------------------

    Fix Version/s: C++ 1.5.1
         Assignee:     (was: XML Security Developers Mailing List)

> unescaping of escaped percent (%25) fails
> -----------------------------------------
>
>                 Key: SANTUARIO-72
>                 URL: https://issues.apache.org/jira/browse/SANTUARIO-72
>             Project: Santuario
>          Issue Type: Bug
>          Components: C++
>         Environment: Operating System: Windows Server 2003
> Platform: PC
>            Reporter: Robert
>             Fix For: C++ 1.5.1
>
>
> The C++ XML-Security library version 1.2 has a bug in XSECDOMUtils.cpp that
> causes it to unescape already unescaped percent characters. The bug can be
> reproduced with any xml file that contains an URI with an escaped percent
> character (%25).
> File Version is:
> $Id: XSECDOMUtils.cpp,v 1.26 2005/02/03 13:53:54 milan Exp $
> The error happens in line 684. There the starting index for the new percent
> search isn't incremented, thus causing it to find the just unescaped percent
> character.
> a simple changed from
> percentIndex = XMLString::indexOf(retPath, chPercent, percentIndex);
> to
> percentIndex = XMLString::indexOf(retPath, chPercent, ++percentIndex);
> fixes this problem.

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.