bitcoin/bitcoin — Issue #851: Out-of-bounds in url converter
Author: mad
Created: 2012-02-16 16:22:42+00:00
State: open

When is '//' removed we access `i + 2` indecies. But array is 257 length and iterate until 256, on last iteration 255 + 2 == 257 and we out-of-bounds.

There:

https://github.com/bitcoin/bitcoin/blob/master/src/qt/qtipcserver.cpp#L37
https://github.com/bitcoin/bitcoin/blob/master/src/qt/qtipcserver.cpp#L73