diff options
author | Miguel Sofer <miguel.sofer@gmail.com> | 2007-10-15 13:29:18 (GMT) |
---|---|---|
committer | Miguel Sofer <miguel.sofer@gmail.com> | 2007-10-15 13:29:18 (GMT) |
commit | 004324cca99a52563cd03e1b7f98b924a3db8d5f (patch) | |
tree | d55a9e8d9772d1e36b55345bea86605631d85ddb | |
parent | bc771adc8abb68ed5ba880ee894607dc3209ec95 (diff) | |
download | tcl-004324cca99a52563cd03e1b7f98b924a3db8d5f.zip tcl-004324cca99a52563cd03e1b7f98b924a3db8d5f.tar.gz tcl-004324cca99a52563cd03e1b7f98b924a3db8d5f.tar.bz2 |
* generic/tclParse.c (Tcl_ParseBraces): fix for possible read
after the end of buffer, [Bug 1813528] (Joe Mistachkin).
-rw-r--r-- | ChangeLog | 5 | ||||
-rw-r--r-- | generic/tclParse.c | 4 |
2 files changed, 7 insertions, 2 deletions
@@ -1,3 +1,8 @@ +2007-10-15 Miguel Sofer <msofer@users.sf.net> + + * generic/tclParse.c (Tcl_ParseBraces): fix for possible read + after the end of buffer, [Bug 1813528] (Joe Mistachkin). + 2007-10-03 Miguel Sofer <msofer@users.sf.net> * generic/tclObj.c (Tcl_FindCommandFromObj): fix finding a deleted diff --git a/generic/tclParse.c b/generic/tclParse.c index e02f836..e939ef3 100644 --- a/generic/tclParse.c +++ b/generic/tclParse.c @@ -13,7 +13,7 @@ * See the file "license.terms" for information on usage and redistribution * of this file, and for a DISCLAIMER OF ALL WARRANTIES. * - * RCS: @(#) $Id: tclParse.c,v 1.25.2.2 2007/07/19 13:43:42 dgp Exp $ + * RCS: @(#) $Id: tclParse.c,v 1.25.2.3 2007/10/15 13:29:19 msofer Exp $ */ #include "tclInt.h" @@ -1441,7 +1441,7 @@ Tcl_ParseBraces(interp, string, numBytes, parsePtr, append, termPtr) * by a '<whitespace>#' on the same line. */ - for (; src > string; src--) { + while (--src > string) { switch (*src) { case '{': openBrace = 1; |