diff options
| author | Miguel Sofer <miguel.sofer@gmail.com> | 2007-10-15 13:29:18 (GMT) |
|---|---|---|
| committer | Miguel Sofer <miguel.sofer@gmail.com> | 2007-10-15 13:29:18 (GMT) |
| commit | 3d383ef0c4a6b8d2a55edd2a82061714e1bce150 (patch) | |
| tree | d55a9e8d9772d1e36b55345bea86605631d85ddb | |
| parent | 80672502e5d4256299b99dd376b6141c90e44bab (diff) | |
| download | tcl-3d383ef0c4a6b8d2a55edd2a82061714e1bce150.zip tcl-3d383ef0c4a6b8d2a55edd2a82061714e1bce150.tar.gz tcl-3d383ef0c4a6b8d2a55edd2a82061714e1bce150.tar.bz2 | |
* generic/tclParse.c (Tcl_ParseBraces): fix for possible read
after the end of buffer, [Bug 1813528] (Joe Mistachkin).
| -rw-r--r-- | ChangeLog | 5 | ||||
| -rw-r--r-- | generic/tclParse.c | 4 |
2 files changed, 7 insertions, 2 deletions
@@ -1,3 +1,8 @@ +2007-10-15 Miguel Sofer <msofer@users.sf.net> + + * generic/tclParse.c (Tcl_ParseBraces): fix for possible read + after the end of buffer, [Bug 1813528] (Joe Mistachkin). + 2007-10-03 Miguel Sofer <msofer@users.sf.net> * generic/tclObj.c (Tcl_FindCommandFromObj): fix finding a deleted diff --git a/generic/tclParse.c b/generic/tclParse.c index e02f836..e939ef3 100644 --- a/generic/tclParse.c +++ b/generic/tclParse.c @@ -13,7 +13,7 @@ * See the file "license.terms" for information on usage and redistribution * of this file, and for a DISCLAIMER OF ALL WARRANTIES. * - * RCS: @(#) $Id: tclParse.c,v 1.25.2.2 2007/07/19 13:43:42 dgp Exp $ + * RCS: @(#) $Id: tclParse.c,v 1.25.2.3 2007/10/15 13:29:19 msofer Exp $ */ #include "tclInt.h" @@ -1441,7 +1441,7 @@ Tcl_ParseBraces(interp, string, numBytes, parsePtr, append, termPtr) * by a '<whitespace>#' on the same line. */ - for (; src > string; src--) { + while (--src > string) { switch (*src) { case '{': openBrace = 1; |