[Bug 59973] New: wininet: InternetCrackUrlW reads out of bounds for empty file URL path before fragment

[WineHQ Bugzilla]

http://bugs.winehq.org/show_bug.cgi?id=59973

            Bug ID: 59973
           Summary: wininet: InternetCrackUrlW reads out of bounds for
                    empty file URL path before fragment
           Product: Wine
           Version: 11.10
          Hardware: x86-64
                OS: Linux
            Status: UNCONFIRMED
          Severity: normal
          Priority: P2
         Component: wininet
          Assignee: [e-mail]
          Reporter: [e-mail]
  Target Milestone: ---
      Distribution: ---

Created attachment 81367
  --> http://bugs.winehq.org/attachment.cgi?id=81367
Bug reproducer

InternetCrackUrlW/InternetCrackUrlA crashes with an out-of-bounds read when
parsing a file: URL whose path is empty and whose fragment starts immediately
after file://. (e.g. file://#). The parse ends in a segmentation fault.
Instead, the function should treat the URL as malformed and return failure.
A reproducer is attached.

-- 
Do not reply to this email, post in Bugzilla using the
above URL to reply.
You are receiving this mail because:
You are watching all bug changes.