Re: [PATCH] ash: fix out-of-bounds read in ifsbreakup()

On 6/16/26 04:19, Sanghyun Park via busybox wrote:
> ifsbreakup() skips over CTLESC before testing the following byte against
> IFS. If CTLESC is the last byte in the recorded region, the scan
> advances to the region end and can dereference one byte past it.
It should not be possible for the last byte in a recorded region to be 
an unescaped CTLESC. Do you have a test case for what this patch fixes?

Cheers,
Harald van Dijk