Skip to content

IriStr::normalize unexpectedly decodes percent-encoded invalid UTF-8 sequence #48

@yescallop

Description

@yescallop

Example:

assert!(str::from_utf8(b"\xF9\xA8\x8E\x80").is_err());
assert_eq!(IriStr::new("a:%F9%A8%8E%80").unwrap().normalize().to_string(), "a:\u{68380}");

This was found by fuzz testing. The fuzz target used was normalize_iri_against_iri_string.rs.

Metadata

Metadata

Assignees

No one assigned

    Labels

    bugSomething isn't working

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions