bug-sed
[Top][All Lists]
Advanced

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

bug#32592: heap-use-after-free in regex module


From: Assaf Gordon
Subject: bug#32592: heap-use-after-free in regex module
Date: Wed, 5 Sep 2018 19:28:14 -0600
User-agent: Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Thunderbird/52.9.1

Bruno alerted me off-list:

On 05/09/18 07:19 PM, Bruno Haible wrote:
> Is the ChangeLog entry up-to-date?
>
> +  * regexec.c (get_subexp): Update 'buf' after call to get_subexp_sub.
> +  Additionally, check for allocation errors and bail out if needed.
>
> I don't see a code change for
> "check for allocation errors and bail out if needed".

Thanks!

I initially had a check for REG_NOERROR there, but removed it.

Attached an updated patch without the outdated comment.

-assaf


Attachment: 0001-regex-fix-heap-use-after-free-error.patch
Description: Text Data


reply via email to

[Prev in Thread] Current Thread [Next in Thread]