bug-bash
[Top][All Lists]
Advanced

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Bug in sh_backslash_quote function (bash 4.3.33)


From: Верещагин Алексей
Subject: Bug in sh_backslash_quote function (bash 4.3.33)
Date: Wed, 04 Mar 2015 20:59:51 +0300

Bash Version: 4.3.33
File: lib/sh/shquote.c
Function: sh_backslash_quote
Line: if (backslash_table[c] == 1)

Description
-----------
Variable "c" has signed integer type and may be negative (if "string" is
not only ASCII characters string). But "c" used as an index in
"backslash_table" array. This causes out of range error and produce
undefined behavior.

Possible solution
-----------------
Cast variable "c" to unsigned char type:
if (backslash_table[(unsigned char)c] == 1)




reply via email to

[Prev in Thread] Current Thread [Next in Thread]