d/freebsd-skq
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

cut: Fix out of boundary write on illegal list argument

Browse Source 
It is possible to trigger an out of boundary write in cut if an invalid
range with autostart has been supplied.

PR:		227330
Submitted by:	tobias@stoeckmann.org
This commit is contained in:
eadler 2018-05-23 09:16:20 +00:00
parent 68c7cdc07b
commit 37e8ba211c
1 changed files with 6 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
usr.bin/cut/cut.c
View File

@ -210,6 +210,12 @@ get_list(char *list)
needpos(maxval + 1); needpos(maxval + 1);
} }
/* reversed range with autostart */
if (maxval < autostart) {
maxval = autostart;
needpos(maxval + 1);
}
/* set autostart */ /* set autostart */
if (autostart) if (autostart)
memset(positions + 1, '1', autostart); memset(positions + 1, '1', autostart);