about summary refs log tree commit diff
path: root/posix/fnmatch_loop.c
diff options
context:
space:
mode:
authorAndreas Schwab <schwab@suse.de>2015-02-26 14:55:24 +0100
committerAndreas Schwab <schwab@suse.de>2015-02-26 16:05:08 +0100
commit4a28f4d55a6cc33474c0792fe93b5942d81bf185 (patch)
treeeda443d1e0a8eb431f21f472c96c3ea89d7d0b69 /posix/fnmatch_loop.c
parent524ae9ea2e3ae9f5bf5d655595fda827e9dc50a1 (diff)
downloadglibc-4a28f4d55a6cc33474c0792fe93b5942d81bf185.tar.gz
glibc-4a28f4d55a6cc33474c0792fe93b5942d81bf185.tar.xz
glibc-4a28f4d55a6cc33474c0792fe93b5942d81bf185.zip
Fix read past end of pattern in fnmatch (bug 18032)
Diffstat (limited to 'posix/fnmatch_loop.c')
-rw-r--r--posix/fnmatch_loop.c5
1 files changed, 2 insertions, 3 deletions
diff --git a/posix/fnmatch_loop.c b/posix/fnmatch_loop.c
index c0cb2fc3e6..72c5d8f041 100644
--- a/posix/fnmatch_loop.c
+++ b/posix/fnmatch_loop.c
@@ -945,14 +945,13 @@ FCT (pattern, string, string_end, no_leading_period, flags, ends, alloca_used)
 		  }
 		else if (c == L('[') && *p == L('.'))
 		  {
-		    ++p;
 		    while (1)
 		      {
 			c = *++p;
-			if (c == '\0')
+			if (c == L('\0'))
 			  return FNM_NOMATCH;
 
-			if (*p == L('.') && p[1] == L(']'))
+			if (c == L('.') && p[1] == L(']'))
 			  break;
 		      }
 		    p += 2;