current/pcre pcre.c,1.4,1.5
Fabian Keil <[email protected]> Sun, 08 May 2016 10:47:51 +0000
| Newsgroups | gmane.comp.web.privoxy.cvs |
|---|---|
| Message-ID | <[email protected]> |
Update of /cvsroot/ijbswa/current/pcre
In directory sfp-cvs-1.v30.ch3.sourceforge.com:/tmp/cvs-serv20622/pcre
Modified Files:
pcre.c
Log Message:
pcre: Fix heap-buffer-overflow when loading invalid filter files
Found with afl-fuzz and ASAN.
Not considered a security vulnerability as filter files are trusted input.
Index: pcre.c
===================================================================
RCS file: /cvsroot/ijbswa/current/pcre/pcre.c,v
retrieving revision 1.4
retrieving revision 1.5
diff -C2 -d -r1.4 -r1.5
*** pcre.c 17 Jan 2016 18:54:16 -0000 1.4
--- pcre.c 8 May 2016 10:47:49 -0000 1.5
***************
*** 2661,2666 ****
else class_charcount++;
ptr++;
}
! while (*ptr != 0 && *ptr != ']');
/* Repeats for negated single chars are handled by the general code */
--- 2661,2671 ----
else class_charcount++;
ptr++;
+ if (*ptr == 0)
+ {
+ *errorptr = ERR6;
+ goto PCRE_ERROR_RETURN;
+ }
}
! while (*ptr != ']');
/* Repeats for negated single chars are handled by the general code */
------------------------------------------------------------------------------
Find and fix application performance issues faster with Applications Manager
Applications Manager provides deep performance insights into multiple tiers of
your business applications. It resolves application problems quickly and
reduces your MTTR. Get your free trial!
https://ad.doubleclick.net/ddm/clk/302982198;130105516;z