diff options
| -rw-r--r-- | ChangeLog | 5 | ||||
| -rw-r--r-- | generic/tclVar.c | 6 |
2 files changed, 8 insertions, 3 deletions
@@ -1,3 +1,8 @@ +1999-06-16 Melissa Hirschl <hershey@matisse.scriptics.com> + + * generic/tclVar.c (Tcl_VariableObjCmd): fixed premature increment + in loop that was causing out-of-bounds reads on array "varName". + 1999-06-16 <stanton@scriptics.com> * tests/execute.test: diff --git a/generic/tclVar.c b/generic/tclVar.c index f2df52e..0618012 100644 --- a/generic/tclVar.c +++ b/generic/tclVar.c @@ -14,7 +14,7 @@ * See the file "license.terms" for information on usage and redistribution * of this file, and for a DISCLAIMER OF ALL WARRANTIES. * - * RCS: @(#) $Id: tclVar.c,v 1.9 1999/06/08 02:59:27 hershey Exp $ + * RCS: @(#) $Id: tclVar.c,v 1.10 1999/06/17 00:20:55 hershey Exp $ */ #include "tclInt.h" @@ -3824,8 +3824,8 @@ Tcl_VariableObjCmd(dummy, interp, objc, objv) for (tail = cp = varName; *cp != '\0'; ) { if (*cp++ == ':') { - while (*cp++ == ':') { - tail = cp; + while (*cp == ':') { + tail = ++cp; } } } |