diff options
| author | Kaz Kylheku <kaz@kylheku.com> | 2020-04-17 07:29:49 -0700 |
|---|---|---|
| committer | Kaz Kylheku <kaz@kylheku.com> | 2020-04-17 07:29:49 -0700 |
| commit | 8daa2d98fe335ae2a9ec6a074d3a2c4037dcd79c (patch) | |
| tree | 4788374a97ecc482d59c67aba71bf7f83a3ffd03 /configure | |
| parent | d3af854c269878f9a8ee2b383b43d61d2cd914fe (diff) | |
| download | txr-8daa2d98fe335ae2a9ec6a074d3a2c4037dcd79c.tar.gz txr-8daa2d98fe335ae2a9ec6a074d3a2c4037dcd79c.tar.bz2 txr-8daa2d98fe335ae2a9ec6a074d3a2c4037dcd79c.zip | |
regex: duplicate character range crash fix.
* regex.c (L1_fill_range, L2_fill_range, L3_fill_range): Bug:
when the arguments ch0 and ch1 indicate that a block is to be
filled entirely, we assume that the pointer is either null
or else a pointer to an allocated block, either of which we can
free and replace with a -1 pointer to indicate a full block.
However the pointer may already be -1, in which case we
wrongly pass that to free(). We must check for it.
Diffstat (limited to 'configure')
0 files changed, 0 insertions, 0 deletions