commit a7c63bbb84a6f2a95bef411e8eb7d9fd0e4bde9c
author Aleksei Efimov <aefimov@openjdk.org> Fri Nov 18 14:46:18 2016 +0300
committer Aleksei Efimov <aefimov@openjdk.org> Fri Nov 18 14:46:18 2016 +0300
tree aa46c2fab65b15bac666710ae943d26734d4d174
parent 806a58766727e05b9b05984d9587ce805ec6730d

8167223: URL handling improvements

Reviewed-by: prappo, chegar

jdk/src/share/classes/java/net/URLStreamHandler.java

diff --git a/jdk/src/share/classes/java/net/URLStreamHandler.java b/jdk/src/share/classes/java/net/URLStreamHandler.java
index a77c5ed..5130559 100644
--- a/jdk/src/share/classes/java/net/URLStreamHandler.java
+++ b/jdk/src/share/classes/java/net/URLStreamHandler.java
@@ -161,9 +161,9 @@
             (spec.charAt(start + 1) == '/')) {
             start += 2;
             i = spec.indexOf('/', start);
-            if (i < 0) {
+            if (i < 0 || i > limit) {
                 i = spec.indexOf('?', start);
-                if (i < 0)
+                if (i < 0 || i > limit)
                     i = limit;
             }
 
@@ -171,8 +171,14 @@
 
             int ind = authority.indexOf('@');
             if (ind != -1) {
-                userInfo = authority.substring(0, ind);
-                host = authority.substring(ind+1);
+                if (ind != authority.lastIndexOf('@')) {
+                    // more than one '@' in authority. This is not server based
+                    userInfo = null;
+                    host = null;
+                } else {
+                    userInfo = authority.substring(0, ind);
+                    host = authority.substring(ind+1);
+                }
             } else {
                 userInfo = null;
             }