sharpetronics/tmux
1
0
Fork 0
mirror of https://github.com/tmux/tmux.git synced 2025-12-24 00:03:47 -05:00
Code Issues Projects Releases Wiki Activity

Do not write after the end of the array and overwrite the stack when

Browse Source 
colon-separated SGR sequences contain empty arguments. Reported by Sergey
Nizovtsev.
This commit is contained in:
nicm 2020-10-29 16:33:01 +00:00 committed by Nicholas Marriott
parent 7a4aa14618
commit 733abfcfc5
1 changed files with 6 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
input.c
View File

@ -1975,8 +1975,13 @@ input_csi_dispatch_sgr_colon(struct input_ctx *ictx, u_int i)
free(copy);
return;
}
} else
} else {
n++;
if (n == nitems(p)) {
free(copy);
return;
}
}
log_debug("%s: %u = %d", __func__, n - 1, p[n - 1]);
}
free(copy);