Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | ListFileLexer: Do not match null bytes in input | Brad King | 2018-06-26 | 1 | -0/+1 |
Extend the fix from commit v3.10.0-rc1~188^2 (ListFileLexer: fix heap-buffer-overflow on malicious input, 2017-08-26) to apply to all lexer token matches. Replace all `.` with `[^\0\n]`. Update all `[^...]` match expressions to not match `\0`. We cannot safely process null bytes in strings. Fixes: #18124 |