diff options
author | okan <okan> | 2015-01-17 02:05:03 +0000 |
---|---|---|
committer | okan <okan> | 2015-01-17 02:05:03 +0000 |
commit | c412f040df05c7221537a598786e0cea4b35167f (patch) | |
tree | cae86e94a5ac9bd3e9f7435700b6c938da22555f | |
parent | 8d1eb202bf13dbe23d8379b095f64a10c0204676 (diff) | |
download | cwm-c412f040df05c7221537a598786e0cea4b35167f.tar.gz cwm-c412f040df05c7221537a598786e0cea4b35167f.tar.xz cwm-c412f040df05c7221537a598786e0cea4b35167f.zip |
Catch up with src parse.y changes by jsg@:
Don't allow embedded nul characters in strings. Fixes a pfctl crash with an anchor name containing an embedded nul found with the afl fuzzer. pfctl parse.y patch from and ok deraadt@
-rw-r--r-- | parse.y | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/parse.y b/parse.y index 590bd44..31d094d 100644 --- a/parse.y +++ b/parse.y @@ -438,6 +438,9 @@ yylex(void) } else if (c == quotec) { *p = '\0'; break; + } else if (c == '\0') { + yyerror("syntax error"); + return (findeol()); } if (p + 1 >= buf + sizeof(buf) - 1) { yyerror("string too long"); |