diff options
| author | Ori Bernstein <ori@eigenstate.org> | 2020-11-21 17:56:34 -0800 |
|---|---|---|
| committer | Ori Bernstein <ori@eigenstate.org> | 2020-11-21 17:56:34 -0800 |
| commit | ad9b1234c365919fa9d8cdb3008b4d42acf37c60 (patch) | |
| tree | 73999d3d9f6b62ddc8395815fc660114a55d2cda /lib/cmap/bbmap | |
| parent | 03f209427b97f100a55fb490f8bc0332eda2db95 (diff) | |
| download | plan9front-ad9b1234c365919fa9d8cdb3008b4d42acf37c60.tar.xz | |
dc: fix crashes with : operator (thanks istvan bak)
dc crashes because a Blk* sometimes ends getting double freed.
To make it crash, any of these lines will do:
(each line is a separate input to dc):
1 sa 2 :a le d sa v :a
1 sa 2 :a le d sa :a
1 sa 2 :a le d sa c
Fix by assigning p to sptr->val before EMTPY causes a jump.
Additionally, dcgetwd() can return 0. all other uses check for
0 ptr; Also fix a buffer overflow.
Diffstat (limited to 'lib/cmap/bbmap')
0 files changed, 0 insertions, 0 deletions
