Release: 1.4.4

Environment

i386, Linux, ELF

Description

gpg --keyserver pgp.mit.edu --search-key é (the last character is e acute) crashes.

The curl_escape() function (curl-shim.c:309) is accidentally passing the first byte of é as a signed char into sprintf(), at which point the value is getting sign-extended to a signed integer. When sprintf() interprets the value on the stack as an unsigned integer, the value doesn't fit into the buffer it's been passed.

Fix

Cast the value to an unsigned char before passing it to sprintf().