diff options
| author | jan.nijtmans <nijtmans@users.sourceforge.net> | 2025-09-19 16:53:24 (GMT) |
|---|---|---|
| committer | jan.nijtmans <nijtmans@users.sourceforge.net> | 2025-09-19 16:53:24 (GMT) |
| commit | aa1e5ad38c8ed02df39d414770feac068c606178 (patch) | |
| tree | 9164dc1e9b6e90c7a638607c883b3a746cd7e5b0 | |
| parent | 213e4f4959332b49207851a4f8ff762a63891a78 (diff) | |
| parent | f5e1c0c4101b76d5967bdc349985df90ac467555 (diff) | |
| download | tcl-aa1e5ad38c8ed02df39d414770feac068c606178.zip tcl-aa1e5ad38c8ed02df39d414770feac068c606178.tar.gz tcl-aa1e5ad38c8ed02df39d414770feac068c606178.tar.bz2 | |
Fix [77059c] TclPushVarName(): pointer overflow
| -rw-r--r-- | changes.md | 1 | ||||
| -rw-r--r-- | generic/tclCompCmds.c | 2 |
2 files changed, 2 insertions, 1 deletions
@@ -14,6 +14,7 @@ to the userbase. - [Tweak install permissions](https://core.tcl-lang.org/tcl/tktview/31d4fa) - [interp creation resets encoding directory search path](https://core.tcl-lang.org/tcl/tktview/87b697) - [Pointer arithmetic with NULL in buildInfoObjCmd()](https://core.tcl-lang.org/tcl/tktview/85fc8b) + - [TclPushVarName(): pointer overflow](https://core.tcl-lang.org/tcl/tktview/77059c) # Updated bundled packages, libraries, standards, data - http 2.10.1 diff --git a/generic/tclCompCmds.c b/generic/tclCompCmds.c index 6c66278..31ab7d0 100644 --- a/generic/tclCompCmds.c +++ b/generic/tclCompCmds.c @@ -3526,7 +3526,7 @@ TclPushVarName( name = varTokenPtr[1].start; nameLen = varTokenPtr[1].size; - if (name[nameLen-1] == ')') { + if (nameLen > 0 && name[nameLen-1] == ')') { /* * last char is ')' => potential array reference. */ |