diff options
author | Rich Felker <dalias@aerifal.cx> | 2015-03-20 18:06:04 -0400 |
---|---|---|
committer | Rich Felker <dalias@aerifal.cx> | 2015-03-20 18:06:04 -0400 |
commit | 39dfd58417ef642307d90306e1c7e50aaec5a35c (patch) | |
tree | dc3b7ad2ab421d7bf49faba6274b399d6eea3e08 /src/math/i386/expm1f.s | |
parent | e626deeec8b85713eea364d6504dc4282c773693 (diff) | |
download | musl-39dfd58417ef642307d90306e1c7e50aaec5a35c.tar.gz musl-39dfd58417ef642307d90306e1c7e50aaec5a35c.tar.xz musl-39dfd58417ef642307d90306e1c7e50aaec5a35c.zip |
fix memory-corruption in regcomp with backslash followed by high byte
the regex parser handles the (undefined) case of an unexpected byte following a backslash as a literal. however, instead of correctly decoding a character, it was treating the byte value itself as a character. this was not only semantically unjustified, but turned out to be dangerous on archs where plain char is signed: bytes in the range 252-255 alias the internal codes -4 through -1 used for special types of literal nodes in the AST.
Diffstat (limited to 'src/math/i386/expm1f.s')
0 files changed, 0 insertions, 0 deletions