[prev in list] [next in list] [prev in thread] [next in thread] 

List:       mandoc-source
Subject:    mdocml: merge kristaps@' bugfix from HEAD: Fix a corner case where
From:       schwarze () mdocml ! bsd ! lv
Date:       2014-08-18 13:16:00
Message-ID: 201408181316.s7IDG0YG000780 () krisdoz ! my ! domain
[Download RAW message or body]

Log Message:
-----------
merge kristaps@' bugfix from HEAD:
Fix a corner case where \H<nil> (where <nil> is the \0 character) would
cause mandoc_escape() to read past the end of an allocated string.
Found when a script scanning of all Mac OSX manual accidentally also
scanned binary (gzip'd) files, discussed with schwarze@ on tech@.

Tags:
----
VERSION_1_12

Modified Files:
--------------
    mdocml:
        mandoc.c

Revision Data
-------------
Index: mandoc.c
===================================================================
RCS file: /usr/vhosts/mdocml.bsd.lv/cvs/mdocml/mandoc.c,v
retrieving revision 1.84
retrieving revision 1.84.2.1
diff -Lmandoc.c -Lmandoc.c -u -p -r1.84 -r1.84.2.1
--- mandoc.c
+++ mandoc.c
@@ -199,7 +199,8 @@ mandoc_escape(const char **end, const ch
 		/* FALLTHROUGH */
 	case 'x':
 		if (strchr(" %&()*+-./0123456789:<=>", **start)) {
-			++*end;
+			if ('\0' != **start)
+				++*end;
 			return(ESCAPE_ERROR);
 		}
 		gly = ESCAPE_IGNORE;
--
 To unsubscribe send an email to source+unsubscribe@mdocml.bsd.lv

[prev in list] [next in list] [prev in thread] [next in thread]