Incorrectly encodes '+' character in URL paths

Bug #1196615 reported by dobey
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
liboauth (Ubuntu)
New
Undecided
Unassigned

Bug Description

liboauth is incorrectly encoding the '+' character as ' ' in URL paths, treating every value passed to the encode method, as a value in the query string. This results in an incorrect signature base string, and signature, when a '+' character is part of the path element of the URL.

The offending code is on line 359 of oauth.c:

  // '+' represents a space, in a URL query string
  while ((qesc&1) && (tmp=strchr(t1,'+'))) *tmp=' ';

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.