* mdocml: Fix a corner case where \H<nil> (where <nil> is the \0
@ 2014-08-18 9:11 kristaps
0 siblings, 0 replies; only message in thread
From: kristaps @ 2014-08-18 9:11 UTC (permalink / raw)
To: source
Log Message:
-----------
Fix a corner case where \H<nil> (where <nil> is the \0 character) would
cause mandoc_escape() to read past the end of an allocated string.
Found when a script scanning of all Mac OSX manual accidentally also
scanned binary (gzip'd) files, discussed with schwarze@ on tech@.
Modified Files:
--------------
mdocml:
mandoc.c
Revision Data
-------------
Index: mandoc.c
===================================================================
RCS file: /usr/vhosts/mdocml.bsd.lv/cvs/mdocml/mandoc.c,v
retrieving revision 1.85
retrieving revision 1.86
diff -Lmandoc.c -Lmandoc.c -u -p -r1.85 -r1.86
--- mandoc.c
+++ mandoc.c
@@ -199,7 +199,8 @@ mandoc_escape(const char **end, const ch
/* FALLTHROUGH */
case 'x':
if (strchr(" %&()*+-./0123456789:<=>", **start)) {
- ++*end;
+ if ('\0' != **start)
+ ++*end;
return(ESCAPE_ERROR);
}
gly = ESCAPE_IGNORE;
--
To unsubscribe send an email to source+unsubscribe@mdocml.bsd.lv
^ permalink raw reply [flat|nested] only message in thread
only message in thread, other threads:[~2014-08-18 9:11 UTC | newest]
Thread overview: (only message) (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2014-08-18 9:11 mdocml: Fix a corner case where \H<nil> (where <nil> is the \0 kristaps
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).