kevin/linux
1
Fork 0
Code

lib: glob.c: added null check for character class

Browse Source 
Add null check for character class.  Previously, an inverted character
class could result in a nul byte being matched and lead to the function
reading past the end of the inputted string.

Link: https://lkml.kernel.org/r/20240826155709.12383-1-swaminathanalok@gmail.com
Signed-off-by: Alok Swaminathan <swaminathanalok@gmail.com>
Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
This commit is contained in:
Alok Swaminathan 2024-08-26 11:57:09 -04:00 committed by Andrew Morton
parent 74b0099340
commit 7b0a5b6669
1 changed files with 2 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
lib/glob.c
View File

@ -68,6 +68,8 @@ bool __pure glob_match(char const *pat, char const *str)
back_str = --str; /* Allow zero-length match */ back_str = --str; /* Allow zero-length match */
break; break;
case '[': { /* Character class */ case '[': { /* Character class */
if (c == '\0') /* No possible match */
return false;
bool match = false, inverted = (*pat == '!'); bool match = false, inverted = (*pat == '!');
char const *class = pat + inverted; char const *class = pat + inverted;
unsigned char a = *class++; unsigned char a = *class++;