[Bug regex/24114] regexec buffer read overrun in "grep -i '\(\(\)*.\)*\(\)\(\)\1'"

classic Classic list List threaded Threaded
1 message Options
Reply | Threaded
Open this post in threaded view

[Bug regex/24114] regexec buffer read overrun in "grep -i '\(\(\)*.\)*\(\)\(\)\1'"

glaubitz at physik dot fu-berlin.de

--- Comment #1 from cvs-commit at gcc dot gnu.org <cvs-commit at gcc dot gnu.org> ---
This is an automated email from the git hooks/post-receive script. It was
generated because a ref change was pushed to the repository containing
the project "GNU C Library master sources".

The branch, master has been updated
       via  583dd860d5b833037175247230a328f0050dbfe9 (commit)
      from  2bac7daa58da1a313bd452369b0508b31e146637 (commit)

Those revisions listed above that are new to this repository have
not appeared on any other notification email; so we list those
revisions in full, below.

- Log -----------------------------------------------------------------

commit 583dd860d5b833037175247230a328f0050dbfe9
Author: Paul Eggert <[hidden email]>
Date:   Mon Jan 21 11:08:13 2019 -0800

    regex: fix read overrun [BZ #24114]

    Problem found by AddressSanitizer, reported by Hongxu Chen in:
    * posix/regexec.c (proceed_next_node):
    Do not read past end of input buffer.


Summary of changes:
 ChangeLog       |   10 +++++++++-
 posix/regexec.c |    6 ++++--
 2 files changed, 13 insertions(+), 3 deletions(-)

You are receiving this mail because:
You are on the CC list for the bug.