diff options
| author | jan.nijtmans <nijtmans@users.sourceforge.net> | 2012-01-21 08:19:10 (GMT) |
|---|---|---|
| committer | jan.nijtmans <nijtmans@users.sourceforge.net> | 2012-01-21 08:19:10 (GMT) |
| commit | 14a4ac7508a9dcc47f15868e2623d6431d498bad (patch) | |
| tree | 0fb9168e970ce41111b49bbf2fef5af1c58e0151 /generic/tclCmdMZ.c | |
| parent | 22f2d32be1891b4df01e8f92867911fa4270e8cb (diff) | |
| parent | 12ee33be32ed8a2806c7e701a94f0ed3789a9a86 (diff) | |
| download | tcl-14a4ac7508a9dcc47f15868e2623d6431d498bad.zip tcl-14a4ac7508a9dcc47f15868e2623d6431d498bad.tar.gz tcl-14a4ac7508a9dcc47f15868e2623d6431d498bad.tar.bz2 | |
Prevent buffer read overflow. Thanks to "sebres" for the report and fix.
Diffstat (limited to 'generic/tclCmdMZ.c')
| -rw-r--r-- | generic/tclCmdMZ.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/generic/tclCmdMZ.c b/generic/tclCmdMZ.c index 60a9414..ab673d5 100644 --- a/generic/tclCmdMZ.c +++ b/generic/tclCmdMZ.c @@ -264,7 +264,7 @@ Tcl_RegexpObjCmd( * start of the string unless the previous character is a newline. */ - if ((offset == 0) || ((offset > 0) && + if ((offset == 0) || ((offset > 0) && (offset < stringLength) && (Tcl_GetUniChar(objPtr, offset-1) == (Tcl_UniChar)'\n'))) { eflags = 0; } else { |