comparison src/ChangeLog @ 5857:6ec4964c1687

Be more careful about echo_buf arithmetic, event-stream.c. src/ChangeLog addition: 2015-03-12 Aidan Kehoe <kehoea@parhasard.net> * event-stream.c (lookup_command_event): Check whether echo_buf_fill_pointer is negative before using it in arithmetic, avoiding a crash in GC. Oddly the old code didn't do this check and didn't crash, but its echo_buf was from malloced memory, not from our string data, so there may have been more room to manoeuvre.
author Aidan Kehoe <kehoea@parhasard.net>
date Thu, 12 Mar 2015 23:31:42 +0000
parents e9bb3688e654
children 36934833b4f3
comparison
equal deleted inserted replaced
5856:27876789edc5 5857:6ec4964c1687
1 2015-03-12 Aidan Kehoe <kehoea@parhasard.net>
2
3 * event-stream.c (lookup_command_event):
4 Check whether echo_buf_fill_pointer is negative before using it in
5 arithmetic, avoiding a crash in GC.
6 Oddly the old code didn't do this check and didn't crash, but its
7 echo_buf was from malloced memory, not from our string data, so
8 there may have been more room to manoeuvre.
9
1 2015-03-04 Aidan Kehoe <kehoea@parhasard.net> 10 2015-03-04 Aidan Kehoe <kehoea@parhasard.net>
2 11
3 * sequence.c (count_with_tail): 12 * sequence.c (count_with_tail):
4 Accept COUNT from #'substitute, #'nsubstitute too. 13 Accept COUNT from #'substitute, #'nsubstitute too.
5 * sequence.c (FdeleteX): 14 * sequence.c (FdeleteX):