diff options
| author | dgp <dgp@users.sourceforge.net> | 2014-05-16 14:47:59 (GMT) |
|---|---|---|
| committer | dgp <dgp@users.sourceforge.net> | 2014-05-16 14:47:59 (GMT) |
| commit | 0c97f2ebb010c257374052fb66f737f99cb1e018 (patch) | |
| tree | f40ad72828d9fa3a5dc4a59ede2dee8daed72706 /unix/tclUnixFile.c | |
| parent | 6f8a00dcd5a10e71caf9e3d2f7067523c4ff0b28 (diff) | |
| parent | 267fb4eebd7345f715153cea17de47c2396d31f8 (diff) | |
| download | tcl-bug_io_32_11.zip tcl-bug_io_32_11.tar.gz tcl-bug_io_32_11.tar.bz2 | |
merge 8.5bug_io_32_11
Diffstat (limited to 'unix/tclUnixFile.c')
| -rw-r--r-- | unix/tclUnixFile.c | 6 |
1 files changed, 6 insertions, 0 deletions
diff --git a/unix/tclUnixFile.c b/unix/tclUnixFile.c index 29f1aba..c5f75a7 100644 --- a/unix/tclUnixFile.c +++ b/unix/tclUnixFile.c @@ -1111,6 +1111,12 @@ TclNativeCreateNativeRep( str = Tcl_GetStringFromObj(validPathPtr, &len); Tcl_UtfToExternalDString(NULL, str, len, &ds); len = Tcl_DStringLength(&ds) + sizeof(char); + if (strlen(Tcl_DStringValue(&ds)) < len - sizeof(char)) { + /* See bug [3118489]: NUL in filenames */ + Tcl_DecrRefCount(validPathPtr); + Tcl_DStringFree(&ds); + return NULL; + } Tcl_DecrRefCount(validPathPtr); nativePathPtr = ckalloc((unsigned) len); memcpy((void*)nativePathPtr, (void*)Tcl_DStringValue(&ds), (size_t) len); |