Incorrectly encodes '+' character in URL paths
Bug #1196615 reported by
dobey
This bug affects 1 person
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
liboauth (Ubuntu) |
New
|
Undecided
|
Unassigned |
Bug Description
liboauth is incorrectly encoding the '+' character as ' ' in URL paths, treating every value passed to the encode method, as a value in the query string. This results in an incorrect signature base string, and signature, when a '+' character is part of the path element of the URL.
The offending code is on line 359 of oauth.c:
// '+' represents a space, in a URL query string
while ((qesc&1) && (tmp=strchr(
To post a comment you must log in.