mirrors/busybox
0
0
Fork 0
mirror of https://git.busybox.net/busybox.git synced 2024-11-23 21:53:25 +08:00
Code Issues Packages Projects Releases Wiki Activity

ash: use-after-free in bash pattern substitution

Browse Source 
Commit daa66ed6 fixed a number of use-after-free bugs in bash pattern
substitution, however one "unguarded" STPUTC remained, which is fixed here.

function                                             old     new   delta
subevalvar                                          1564    1576     +12

Signed-off-by: Karsten Sperling <ksperling@apple.com>
Signed-off-by: Denys Vlasenko <vda.linux@googlemail.com>
This commit is contained in:
Karsten Sperling 2023-05-18 16:47:49 +02:00 committed by Denys Vlasenko
parent c5682813ab
commit 3e83699ce2
1 changed files with 2 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
shell/ash.c
View File

@ -7370,6 +7370,8 @@ subevalvar(char *start, char *str, int strloc,
char *restart_detect = stackblock(); char *restart_detect = stackblock();
if (quotes && *loc == '\\') { if (quotes && *loc == '\\') {
STPUTC(CTLESC, expdest); STPUTC(CTLESC, expdest);
if (stackblock() != restart_detect)
goto restart;
len++; len++;
} }
STPUTC(*loc, expdest); STPUTC(*loc, expdest);