Fix an out of band read when parsing a URL component of just "%". The...

net/base/escape_unittest.cc

 // Copyright (c) 2006-2008 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include <string>
 
 #include "net/base/escape.h"
 
 #include "base/basictypes.h"
 #include "base/logging.h"
@@ skipping 141 matching lines @@
 
   // When we're not unescaping NULLs.
   expected = "Null";
   expected.push_back(0);
   expected.append("%009Test");
   EXPECT_EQ(expected, UnescapeURLComponent(input, UnescapeRule::NORMAL));
 }
 
 TEST(Escape, UnescapeAndDecodeURLComponent) {
   const UnescapeAndDecodeURLCase unescape_cases[] = {
+    {"UTF8", "%", "%", "%", L"%"},
     {"UTF8", "+", "+", " ", L"+"},
     {"UTF8", "%2+", "%2+", "%2 ", L"%2+"},
     {"UTF8", "+%%%+%%%", "+%%%+%%%", " %%% %%%", L"+%%%+%%%"},
     {"UTF8", "Don't escape anything",
              "Don't escape anything",
              "Don't escape anything",
              L"Don't escape anything"},
     {"UTF8", "+Invalid %escape %2+",
              "+Invalid %escape %2+",
              " Invalid %escape %2 ",
@@ skipping 43 matching lines @@
     { "<hello>", "&lt;hello&gt;" },
     { "don\'t mess with me", "don&#39;t mess with me" },
   };
   for (size_t i = 0; i < arraysize(tests); ++i) {
     std::string result = EscapeForHTML(std::string(tests[i].input));
     EXPECT_EQ(std::string(tests[i].expected_output), result);
   }
 }