[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
bug#32592: heap-use-after-free in regex module
From: |
Assaf Gordon |
Subject: |
bug#32592: heap-use-after-free in regex module |
Date: |
Wed, 5 Sep 2018 19:28:14 -0600 |
User-agent: |
Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Thunderbird/52.9.1 |
Bruno alerted me off-list:
On 05/09/18 07:19 PM, Bruno Haible wrote:
> Is the ChangeLog entry up-to-date?
>
> + * regexec.c (get_subexp): Update 'buf' after call to get_subexp_sub.
> + Additionally, check for allocation errors and bail out if needed.
>
> I don't see a code change for
> "check for allocation errors and bail out if needed".
Thanks!
I initially had a check for REG_NOERROR there, but removed it.
Attached an updated patch without the outdated comment.
-assaf
0001-regex-fix-heap-use-after-free-error.patch
Description: Text Data
- bug#32592: s with i modifier seems to work incorrectly, Assaf Gordon, 2018/09/04
- bug#32592: s with i modifier seems to work incorrectly, Saito Takaaki, 2018/09/04
- bug#32592: heap-use-after-free in regex module (was: s with i modifier seems to work incorrectly), Assaf Gordon, 2018/09/05
- bug#32592: heap-use-after-free in regex module,
Assaf Gordon <=
- bug#32592: heap-use-after-free in regex module, Jim Meyering, 2018/09/06
- bug#32592: heap-use-after-free in regex module, Paul Eggert, 2018/09/06
- bug#32592: heap-use-after-free in regex module, Assaf Gordon, 2018/09/06
- bug#32592: heap-use-after-free in regex module, Paul Eggert, 2018/09/06
- bug#32592: heap-use-after-free in regex module, Jim Meyering, 2018/09/06