Commit87f42aa

khwilliamson

authored and

steve-m-hay

committed

CVE-2024-56406: Heap-buffer-overflow with tr//

This was due to underallocating needed space. If the translation forcessomething to become UTF-8 that is initially bytes, that UTF-8 couldnow require two bytes where previously a single one would do.(cherry picked from commit f93109c8a6950aafbd7488d98e112552033a3686)

1 parentaec44b5 commit87f42aaCopy full SHA for 87f42aa

File tree

1 file changed

-0

lines changed

op.c

1 file changed

-0

lines changed

`‎op.c`

Lines changed: 1 addition & 0 deletions

Original file line number	Diff line number	Diff line change
`@@ -6881,6 +6881,7 @@ S_pmtrans(pTHX_ OP o, OP expr, OP *repl)`
`6881`	`6881`	`* same time. But otherwise one crosses before the other */`
`6882`	`6882`	`if (t_cp < 256 && r_cp_end > 255 && r_cp != t_cp) {`
`6883`	`6883`	`can_force_utf8 = TRUE;`
	`6884`	`+ max_expansion = MAX(2, max_expansion);`
`6884`	`6885`	`}`
`6885`	`6886`	`}`
`6886`	`6887`

0 commit comments

Comments

(0)

Movatterモバイル変換

Navigation Menu

Search code, repositories, users, issues, pull requests...

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Commit87f42aa

File tree

1 file changed

1 file changed

`‎op.c`

0 commit comments