diff options
| author | Ingo Schwarze <schwarze@cvs.openbsd.org> | 2015-01-01 19:28:30 +0000 |
|---|---|---|
| committer | Ingo Schwarze <schwarze@cvs.openbsd.org> | 2015-01-01 19:28:30 +0000 |
| commit | 958d14f34656fc39912878583289a32f320736ff (patch) | |
| tree | a706872766c42252800e76b8e0a082cc23246aed /sbin/badsect | |
| parent | 0381b68cfbf3ebd8342447b71bda3529c09a2de0 (diff) | |
Fix a buffer overrun triggered by a trailing backslash at EOF in
an unclosed conditional body. If the memory contained the byte
sequence "\}" after the end of the buffer before the next NUL, this
could even write beyond the end of the buffer, specifically '&' to
the location of the '}'. Found by jsg@ with afl.
Diffstat (limited to 'sbin/badsect')
0 files changed, 0 insertions, 0 deletions