This is the mail archive of the libc-hacker@sources.redhat.com mailing list for the glibc project.

Note that libc-hacker is a closed list. You may look at the archives of this list, but subscription and posting are not open.

Index Nav:	[Date Index] [Subject Index] [Author Index] [Thread Index]
Message Nav:	[Date Prev] [Date Next]	[Thread Prev] [Thread Next]
Other format:	[Raw text]

[PATCH] Fix bug-regex4

From: Jakub Jelinek <jakub at redhat dot com>
To: Ulrich Drepper <drepper at redhat dot com>, Roland McGrath <roland at redhat dot com>
Cc: Glibc hackers <libc-hacker at sources dot redhat dot com>
Date: Mon, 7 Apr 2003 23:13:08 +0200
Subject: [PATCH] Fix bug-regex4
Reply-to: Jakub Jelinek <jakub at redhat dot com>

Hi!

If range and/or stop arguments to re_search_2 are too large, re_search_2
might search beyond end of buffer.

2003-04-07  Jakub Jelinek  <jakub at redhat dot com>

	* posix/bug-regex4.c (main): Cap range and stop arguments to
	sum of size1 and size2 arguments.

--- libc/posix/bug-regex4.c.jj	2002-07-29 09:14:54.000000000 -0400
+++ libc/posix/bug-regex4.c	2003-04-07 17:04:31.000000000 -0400
@@ -43,9 +43,9 @@ main (void)
     }
   else
     {
-      match[0] = re_search_2 (&regex, "xyabez", 6, "", 0, 1, 9, NULL, 10);
+      match[0] = re_search_2 (&regex, "xyabez", 6, "", 0, 1, 5, NULL, 6);
       match[1] = re_search_2 (&regex, NULL, 0, "abc", 3, 0, 3, NULL, 3);
-      match[2] = re_search_2 (&regex, "xya", 3, "bd", 2, 2, 6, NULL, 8);
+      match[2] = re_search_2 (&regex, "xya", 3, "bd", 2, 2, 3, NULL, 5);
       if (match[0] != 2 || match[1] != 0 || match[2] != 2)
 	{
 	  printf ("re_search_2 returned %d,%d,%d, expected 2,0,2\n",

	Jakub

Follow-Ups:
- Re: [PATCH] Fix bug-regex4
  - From: Roland McGrath

Index Nav:	[Date Index] [Subject Index] [Author Index] [Thread Index]
Message Nav:	[Date Prev] [Date Next]	[Thread Prev] [Thread Next]