mirror of
https://github.com/sheumann/hush.git
synced 2024-09-12 00:55:11 +00:00
tr: fix yet another access past the end of a string (bug 4374)
This commit is contained in:
parent
b357149867
commit
20be63fe71
@ -145,12 +145,14 @@ static unsigned int expand(const char *arg, char *buffer)
|
||||
arg--; /* points to x */
|
||||
continue; /* copy all, including eventual ']' */
|
||||
}
|
||||
/* [x-y...] */
|
||||
arg++;
|
||||
/* [x-z] */
|
||||
arg++; /* skip - */
|
||||
if (arg[0] == '\0' || arg[1] != ']')
|
||||
bb_show_usage();
|
||||
ac = *arg++;
|
||||
while (i <= ac)
|
||||
*buffer++ = i++;
|
||||
arg++; /* skip the assumed ']' */
|
||||
arg++; /* skip ] */
|
||||
continue;
|
||||
}
|
||||
*buffer++ = *arg++;
|
||||
|
Loading…
Reference in New Issue
Block a user