summaryrefslogtreecommitdiffstats
path: root/generic
diff options
context:
space:
mode:
authorMiguel Sofer <miguel.sofer@gmail.com>2004-09-29 19:36:34 (GMT)
committerMiguel Sofer <miguel.sofer@gmail.com>2004-09-29 19:36:34 (GMT)
commitdb28fb893dc50fd54f948ec4bf06c296cb4165f2 (patch)
tree764d635a39043219a6e221c8c71a651b9ac1c9a6 /generic
parentc36a55ff0083738d8bd88d1ba5c164046e441f8f (diff)
downloadtcl-db28fb893dc50fd54f948ec4bf06c296cb4165f2.zip
tcl-db28fb893dc50fd54f948ec4bf06c296cb4165f2.tar.gz
tcl-db28fb893dc50fd54f948ec4bf06c296cb4165f2.tar.bz2
fix for buffer overflow in [subst], [Bug 1036649]
Diffstat (limited to 'generic')
-rw-r--r--generic/tclBasic.c12
1 files changed, 11 insertions, 1 deletions
diff --git a/generic/tclBasic.c b/generic/tclBasic.c
index f7116dd..8b199ce 100644
--- a/generic/tclBasic.c
+++ b/generic/tclBasic.c
@@ -13,7 +13,7 @@
* See the file "license.terms" for information on usage and redistribution
* of this file, and for a DISCLAIMER OF ALL WARRANTIES.
*
- * RCS: @(#) $Id: tclBasic.c,v 1.75.2.9 2004/07/28 16:28:20 dgp Exp $
+ * RCS: @(#) $Id: tclBasic.c,v 1.75.2.10 2004/09/29 19:36:36 msofer Exp $
*/
#include "tclInt.h"
@@ -3727,6 +3727,16 @@ Tcl_EvalEx(interp, script, numBytes, flags)
return TCL_OK;
}
} while (bytesLeft > 0);
+
+ if (nested) {
+ /*
+ * This nested script did not terminate in ']', it is an error.
+ */
+
+ code = TCL_ERROR;
+ goto error;
+ }
+
iPtr->termOffset = p - script;
iPtr->varFramePtr = savedVarFramePtr;
return TCL_OK;