summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authordgp <dgp@users.sourceforge.net>2015-04-24 15:48:56 (GMT)
committerdgp <dgp@users.sourceforge.net>2015-04-24 15:48:56 (GMT)
commita46cd743dd7ae7d8f2c8dc1ca5bff1dc6d0502c5 (patch)
tree4039637916184060e9eec1a5154695b3d4ed5a64
parent459a48dc5cf4b107660eae9b526ee295d0b3a77b (diff)
parentae445193f4014a405dad671de52f4b4aae4959d9 (diff)
downloadtcl-a46cd743dd7ae7d8f2c8dc1ca5bff1dc6d0502c5.zip
tcl-a46cd743dd7ae7d8f2c8dc1ca5bff1dc6d0502c5.tar.gz
tcl-a46cd743dd7ae7d8f2c8dc1ca5bff1dc6d0502c5.tar.bz2
Fix UtfToUtfProc() to remove the potential to read beyond end of input buffer.
-rw-r--r--generic/tclEncoding.c2
1 files changed, 1 insertions, 1 deletions
diff --git a/generic/tclEncoding.c b/generic/tclEncoding.c
index 179ca17..a7ef199 100644
--- a/generic/tclEncoding.c
+++ b/generic/tclEncoding.c
@@ -2334,7 +2334,7 @@ UtfToUtfProc(
*dst++ = *src++;
} else if (pureNullMode == 1 && UCHAR(*src) == 0xc0 &&
- UCHAR(*(src+1)) == 0x80) {
+ (src + 1 < srcEnd) && UCHAR(*(src+1)) == 0x80) {
/*
* Convert 0xc080 to real nulls when we are in output mode.
*/