1 files changed, 11 insertions, 1 deletions
diff --git a/test/nsurl.c b/test/nsurl.c
index 631e7ae2c..ef7c31a11 100644
--- a/test/nsurl.c
+++ b/test/nsurl.c
@@ -161,13 +161,18 @@ static const struct test_pairs create_tests[] = {
 	{ "http://%7a%7A/", "http://zz/" },
 
 	/* bad escape */
-	{ "http://%1g%G0/", "http://%1g%g0/" },
+	{ "http://%1g%G0/", NULL },
 
 	{ "    http://www.ns-b.org/",		"http://www.ns-b.org/" },
 	{ "http://www.ns-b.org/    ",		"http://www.ns-b.org/" },
 	{ "http://www.ns-b.org    ",		"http://www.ns-b.org/" },
 	{ "http://www.ns-b.org/?q   ",		"http://www.ns-b.org/?q" },
 	{ "http://www.ns-b.org/#f    ",		"http://www.ns-b.org/#f" },
+
+	/* Regression check from security report */
+	{ "http://AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfff",
+	  "http://aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaafff/"
+	}
 };
 
 /**
@@ -1289,6 +1294,11 @@ static const struct test_pairs utf8_tests[] = {
 	{ "http://a.xn--11b4c3d/a", "http://a.कॉम/a"  },
 	{ "https://smog.xn--3oq18vl8pn36a/test", "https://smog.大众汽车/test"},
 
+
+	/* Regression check from security report */
+	{ "http://AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfff",
+	  "http://aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaafff/"
+	}
 };