d/freebsd-skq
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

cut: Fix out of boundary write on illegal list argument

Browse Source 
It is possible to trigger an out of boundary write in cut if an invalid
range with autostart has been supplied.

PR:		227330
Submitted by:	tobias@stoeckmann.org
This commit is contained in:
Eitan Adler 2018-05-23 09:16:20 +00:00
parent f3e32074e0
commit 6872fd3c94
1 changed files with 6 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
usr.bin/cut/cut.c
View File

@ -210,6 +210,12 @@ get_list(char *list)
needpos(maxval + 1); needpos(maxval + 1);
} }
/* reversed range with autostart */
if (maxval < autostart) {
maxval = autostart;
needpos(maxval + 1);
}
/* set autostart */ /* set autostart */
if (autostart) if (autostart)
memset(positions + 1, '1', autostart); memset(positions + 1, '1', autostart);