From b07a30380fa20325af4a7acbc29f93dd7ed60ec1 Mon Sep 17 00:00:00 2001 From: Miguel Sofer Date: Mon, 15 Oct 2007 13:22:49 +0000 Subject: * generic/tclParse.c (Tcl_ParseBraces): fix for possible read after the end of buffer, [Bug 1813528] (Joe Mistachkin). --- ChangeLog | 5 +++++ generic/tclParse.c | 4 ++-- 2 files changed, 7 insertions(+), 2 deletions(-) diff --git a/ChangeLog b/ChangeLog index f1b715f..d52f608 100644 --- a/ChangeLog +++ b/ChangeLog @@ -1,3 +1,8 @@ +2007-10-15 Miguel Sofer + + * generic/tclParse.c (Tcl_ParseBraces): fix for possible read + after the end of buffer, [Bug 1813528] (Joe Mistachkin). + 2007-10-14 David Gravereaux * tools/mkdepend.tcl (new): Initial stab at generating automatic diff --git a/generic/tclParse.c b/generic/tclParse.c index 8fe9516..b11e5bf 100644 --- a/generic/tclParse.c +++ b/generic/tclParse.c @@ -12,7 +12,7 @@ * See the file "license.terms" for information on usage and redistribution of * this file, and for a DISCLAIMER OF ALL WARRANTIES. * - * RCS: @(#) $Id: tclParse.c,v 1.56 2007/07/19 13:57:36 dgp Exp $ + * RCS: @(#) $Id: tclParse.c,v 1.57 2007/10/15 13:22:50 msofer Exp $ */ #include "tclInt.h" @@ -1785,7 +1785,7 @@ Tcl_ParseBraces( { register int openBrace = 0; - for (; src > start; src--) { + while (--src > start) { switch (*src) { case '{': openBrace = 1; -- cgit v0.12