summaryrefslogtreecommitdiff
path: root/22a0a7f25596c28588bac5bf9e12cd8c534684d4.html
diff options
context:
space:
mode:
authorChris Down <chris@chrisdown.name>2020-05-13 12:20:53 +0100
committerHiltjo Posthuma <hiltjo@codemadness.org>2020-05-14 11:43:34 +0200
commit2649e8d5334f7e37a1710c60fb740ecfe91b9f9e (patch)
tree36d235c6bec798d085e776869470d87b6f8330bc /22a0a7f25596c28588bac5bf9e12cd8c534684d4.html
parent72d33d463fed7ba271961a6f91cae1fed8faa454 (diff)
Avoid out-of-bounds access when a slide input line begins with \0
If we read in a line with \0 at the beginning, blen will be 0. However, we then try to index our copy of the buffer with s->lines[s->linecount][blen-1], we'll read (and potentially write if the data happens to be 0x0A) outside of strdup's allocated memory, and may crash. Fix this by just rejecting lines with a leading \0. Lines with nulls embedded in other places don't invoke similar behaviour, since the length is still >0.
Diffstat (limited to '22a0a7f25596c28588bac5bf9e12cd8c534684d4.html')
0 files changed, 0 insertions, 0 deletions