From 1afa286557a53dec4c12a0d018600588bbd7786a Mon Sep 17 00:00:00 2001
From: Kaz Kylheku <kaz@kylheku.com>
Date: Sat, 3 Dec 2011 00:45:40 -0800
Subject: * lib.c (split_str, split_str_set): Bugfix: access beyond the end of
 the input string.

---
 lib.c | 14 ++++++++++++--
 1 file changed, 12 insertions(+), 2 deletions(-)

(limited to 'lib.c')

diff --git a/lib.c b/lib.c
index da774db6..18b858dc 100644
--- a/lib.c
+++ b/lib.c
@@ -1324,13 +1324,18 @@ val split_str(val str, val sep)
 
   list_collect_decl (out, iter);
 
-  for (; *cstr != 0; cstr += len_sep) {
+  for (;;) {
     const wchar_t *psep = wcsstr(cstr, csep);
     size_t span = (psep != 0) ? psep - cstr : wcslen(cstr);
     val piece = mkustring(num(span));
     init_str(piece, cstr);
     list_collect (iter, piece);
     cstr += span;
+    if (psep != 0) {
+      cstr += len_sep;
+      continue;
+    }
+    break;
   }
 
   rel1(&sep);
@@ -1348,12 +1353,17 @@ val split_str_set(val str, val set)
   prot1(&str);
   prot1(&set);
 
-  for (; *cstr != 0; cstr++) {
+  for (;;) {
     size_t span = wcscspn(cstr, cset);
     val piece = mkustring(num(span));
     init_str(piece, cstr);
     list_collect (iter, piece);
     cstr += span;
+    if (*cstr) {
+      cstr++;
+      continue;
+    }
+    break;
   }
 
   rel1(&set);
-- 
cgit v1.2.3