grep branch, master, updated. v2.18-96-g2c78063

[Jim Meyering]

This is an automated email from the git hooks/post-receive script. It was
generated because a ref change was pushed to the repository containing
the project "grep".

The branch, master has been updated
       via  2c780631f89a1e50fe8221f72e128cf39b212141 (commit)
      from  c841bbb0fc18abaa20638a4f9b965ec075c23457 (commit)

Those revisions listed above that are new to this repository have
not appeared on any other notification email; so we list those
revisions in full, below.

- Log -----------------------------------------------------------------
http://git.savannah.gnu.org/cgit/grep.git/commit/?id=2c780631f89a1e50fe8221f72e128cf39b212141


commit 2c780631f89a1e50fe8221f72e128cf39b212141
Author: Jim Meyering <address@hidden>
Date:   Thu Apr 24 09:03:39 2014 -0700

    grep: fix new heap write buffer overrun
    
    * src/dfa.c (parse_bracket_exp): Fix off-by-one allocation error.
    Exposed by running the tests with an ASAN-enabled binary (i.e.,
    created using gcc's -fsanitize=address option).  Introduced by
    commit v2.18-70-gd3d9612, "dfa: simplify range char allocation".

diff --git a/src/dfa.c b/src/dfa.c
index 5dc0f09..24b4d5c 100644
--- a/src/dfa.c
+++ b/src/dfa.c
@@ -1125,7 +1125,7 @@ parse_bracket_exp (void)
                      is wrong in multiple ways, it's never used in practice.
                      FIXME: Remove this (and related) unused code.  */
                   work_mbc->ranges
-                    = maybe_realloc (work_mbc->ranges, work_mbc->nranges + 1,
+                    = maybe_realloc (work_mbc->ranges, work_mbc->nranges + 2,
                                      &ranges_al, sizeof *work_mbc->ranges);
                   work_mbc->ranges[work_mbc->nranges].beg
                     = case_fold ? towlower (wc) : wc;

-----------------------------------------------------------------------

Summary of changes:
 src/dfa.c |    2 +-
 1 files changed, 1 insertions(+), 1 deletions(-)


hooks/post-receive
-- 
grep