Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Fix buffer overflow with invalid quotes #209

Merged
merged 1 commit into from
Sep 30, 2021
Merged

Fix buffer overflow with invalid quotes #209

merged 1 commit into from
Sep 30, 2021

Conversation

stoeckmann
Copy link
Contributor

A follow-up commit to 6f49ad0.
The quotes can have their upper bits set in which case more than just
two digits are printed, eventually overflowing the allocated memory.

How to reproduce:

less --quotes=$(echo -e '\xff\xff') -f /dev/null
Then enter "-T x" to trigger lglob function

Shoutout to @c3h2_ctf

A follow-up commit to 6f49ad0.
The quotes can have their upper bits set in which case more than just
two digits are printed, eventually overflowing the allocated memory.

How to reproduce:

less --quotes=$(echo -e '\xff\xff') -f /dev/null
Then enter "-T x" to trigger lglob function
@gwsw gwsw merged commit 426fd42 into gwsw:master Sep 30, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

2 participants