[liblouis-liblouisxml] [PATCH] FW: Out-of-bounds access in doLang2Table

  • From: Peter Nilsson Lundblad <plundblad@xxxxxxxxxx>
  • To: liblouis-liblouisxml@xxxxxxxxxxxxx
  • Date: Tue, 19 Mar 2013 10:18:16 -0700

Hi liblouis maintainers,

One of my colleges found an out-of-bounds access bug in liblouis.
He is not a member of this list, so maybe his report is sitting in the 
moderation
queue.  See below for the patch that should fix this.

Regards,
//Peter
--- Begin Message ---
  • From: Jeremy Roman <jbroman@xxxxxxxxxx>
  • To: liblouis-liblouisxml@xxxxxxxxxxxxx
  • Date: Fri, 15 Mar 2013 11:10:58 -0700
In the function "doLang2Table", there is an out-of-bounds access of
"newList". If the character '=' is not found during its search, it
accesses "newList[-1]" before returning. In my use case, this access
results in a (fatal) segmentation fault.

Suggested patch is attached. Output of "make check" is unaffected
(relative to trunk), and this fixes the segfault I encountered.

Regards,

-- 
Jeremy Roman
Software Engineering Intern
Google

Attachment: liblouis-outofbounds.patch
Description: Binary data


--- End Message ---
--

Other related posts:

  1. Home
  2. liblouis-liblouisxml
  3. Archive
  4. 03-2013