current/pcre pcre.c,1.5,1.6
Fabian Keil <[email protected]> Sun, 08 May 2016 10:48:11 +0000
| Newsgroups | gmane.comp.web.privoxy.cvs |
|---|---|
| Message-ID | <[email protected]> |
Update of /cvsroot/ijbswa/current/pcre
In directory sfp-cvs-1.v30.ch3.sourceforge.com:/tmp/cvs-serv20658/pcre
Modified Files:
pcre.c
Log Message:
pcre: Improve sanity check in read_repeat_counts()
While it supposedly was 'paranoid' already, it actually
missed most of the invalid values which could cause buffer
overflows later on.
Found with afl-fuzz and ASAN.
Not considered a security issue as the input is trusted.
Index: pcre.c
===================================================================
RCS file: /cvsroot/ijbswa/current/pcre/pcre.c,v
retrieving revision 1.5
retrieving revision 1.6
diff -C2 -d -r1.5 -r1.6
*** pcre.c 8 May 2016 10:47:49 -0000 1.5
--- pcre.c 8 May 2016 10:48:09 -0000 1.6
***************
*** 731,735 ****
pointer to the terminating '}'. */
! if (min > 65535 || max > 65535)
*errorptr = ERR5;
else
--- 731,735 ----
pointer to the terminating '}'. */
! if (min < 0 || min > 65535 || max < -1 || max > 65535)
*errorptr = ERR5;
else
------------------------------------------------------------------------------
Find and fix application performance issues faster with Applications Manager
Applications Manager provides deep performance insights into multiple tiers of
your business applications. It resolves application problems quickly and
reduces your MTTR. Get your free trial!
https://ad.doubleclick.net/ddm/clk/302982198;130105516;z