diff options
author | hershey <hershey> | 1999-06-17 00:20:54 (GMT) |
---|---|---|
committer | hershey <hershey> | 1999-06-17 00:20:54 (GMT) |
commit | 15888e552b012280c4de7b8bdb67c5cafd8062de (patch) | |
tree | 154089939fbd1184a3d2671f55fc0c3a8a91f268 /generic | |
parent | e04beeacaa35802b78edc6dea6ec5fb78448ef1c (diff) | |
download | tcl-15888e552b012280c4de7b8bdb67c5cafd8062de.zip tcl-15888e552b012280c4de7b8bdb67c5cafd8062de.tar.gz tcl-15888e552b012280c4de7b8bdb67c5cafd8062de.tar.bz2 |
* generic/tclVar.c (Tcl_VariableObjCmd): fixed premature increment
in loop that was causing out-of-bounds reads on array "varName".
Diffstat (limited to 'generic')
-rw-r--r-- | generic/tclVar.c | 6 |
1 files changed, 3 insertions, 3 deletions
diff --git a/generic/tclVar.c b/generic/tclVar.c index f2df52e..0618012 100644 --- a/generic/tclVar.c +++ b/generic/tclVar.c @@ -14,7 +14,7 @@ * See the file "license.terms" for information on usage and redistribution * of this file, and for a DISCLAIMER OF ALL WARRANTIES. * - * RCS: @(#) $Id: tclVar.c,v 1.9 1999/06/08 02:59:27 hershey Exp $ + * RCS: @(#) $Id: tclVar.c,v 1.10 1999/06/17 00:20:55 hershey Exp $ */ #include "tclInt.h" @@ -3824,8 +3824,8 @@ Tcl_VariableObjCmd(dummy, interp, objc, objv) for (tail = cp = varName; *cp != '\0'; ) { if (*cp++ == ':') { - while (*cp++ == ':') { - tail = cp; + while (*cp == ':') { + tail = ++cp; } } } |