diff options
| author |   millert <millert@openbsd.org> | 2005-12-01 20:23:35 +0000 |
|---|---|---|
| committer | millert <millert@openbsd.org> | 2005-12-01 20:23:35 +0000 |
| commit | 1d60e38155f523b2c4cf244482a144d4dd34e14c (patch) | |
| tree | 0a02fcb4d5486dadc615d064c5b077826f158a4a | |
| parent | rcs_findrev() is not static anymore; align protos while here; (diff) | |
| download | wireguard-openbsd-1d60e38155f523b2c4cf244482a144d4dd34e14c.tar.xz wireguard-openbsd-1d60e38155f523b2c4cf244482a144d4dd34e14c.zip | |
Fix an int oflow bug in perl's parameter format string code.
Credit: Jack Louis of Dyad Security
| -rw-r--r-- | gnu/usr.bin/perl/sv.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/gnu/usr.bin/perl/sv.c b/gnu/usr.bin/perl/sv.c index 63f9964a709..5332ef7f82c 100644 --- a/gnu/usr.bin/perl/sv.c +++ b/gnu/usr.bin/perl/sv.c @@ -8541,7 +8541,7 @@ Perl_sv_vcatpvfn(pTHX_ SV *sv, const char *pat, STRLEN patlen, va_list *args, SV if (EXPECT_NUMBER(q, width)) { if (*q == '$') { ++q; - efix = width; + efix = width > INT_MAX ? INT_MAX : width; } else { goto gotwidth; } |