Gwan – a fast 150kb web server supporting 14 scripting languages

Re:Gwan – a fast 150kb web server supporting 14 scripting la... by userbinator on Monday August 04, 2014 @06:38AM (#8131062)

Oh, and their examples are weird. I found this snippet earlier on, and it made me go “Huh?”

    if(s[0] == '%' && s[1] == '2' && s[2] == '0') // escaped space?

That can read past the end of the string if it ends in a '%'. The length check is missing. Maybe it's not such a big deal here, and this is only an example, but if the author's examples are this sloppy, and we can't see the actual source code of his server, then it's hard not to generalise.

[ Parent | on HN ]

Re:Gwan – a fast 150kb web server supporting 14 scripting la... by FooBarWidget on Monday August 04, 2014 @06:54AM (#8131093)

It will not read past the string if it's null-terminated.

[ Parent | on HN ]

Re:Gwan – a fast 150kb web server supporting 14 scripting la... by viraptor on Monday August 04, 2014 @09:19AM (#8131590)

It took me a moment to figure out why that won't happen. It could use a comment in that place.

[ Parent | on HN ]