[Top][All Lists]
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
bug#10953: Potential logical bug in readtokens.c
|
From: |
Xu Zhongxing |
|
Subject: |
bug#10953: Potential logical bug in readtokens.c |
|
Date: |
Tue, 06 Mar 2012 13:58:59 +0800 |
|
User-agent: |
Mozilla/5.0 (X11; Linux x86_64; rv:10.0.2) Gecko/20120216 Thunderbird/10.0.2 |
Hi,
I think I found a potential bug. But I am not sure about it. It looks
real from the code.
For coreutils 8.15, in file readtokens.c, function readtoken()
If delim is NULL, and saved_delim is not NULL, then the condition on
line 75 is not satisfied, but the condition on line 79 is satisfied.
In this case, there could be NULL pointer deference for delim[i] in line 84.
- Zhongxing Xu
- bug#10953: Potential logical bug in readtokens.c,
Xu Zhongxing <=