diff options
author | John Baldwin <jhb@FreeBSD.org> | 2022-10-05 23:48:05 +0000 |
---|---|---|
committer | John Baldwin <jhb@FreeBSD.org> | 2022-10-05 23:48:05 +0000 |
commit | ba86cffb2840e12b5d72453d7c574850a76001d8 (patch) | |
tree | 9f6188f9d23abb5f462653f8b7fcfa650541cb47 /sys/gnu/fs/xfs | |
parent | e5f2d5b35e79ddf995a8a5c782a7940ca2e05fdf (diff) | |
download | src-ba86cffb2840e12b5d72453d7c574850a76001d8.tar.gz src-ba86cffb2840e12b5d72453d7c574850a76001d8.zip |
rs: Fix some pointer arith UB.
If the next column was blank, then the length of the following entry
was computed as the end of the following entry minus a global variable
"blank" which is not in the same string or allocation. Instead, save
the start value of 'p' explicitly instead of abusing '*ep'. Possibly
we should just increment p before saving it in sp in the 'blank' case,
but at worst that would just mean maxlen might be one char too large
which should be harmless.
Reviewed by: brooks
Differential Revision: https://reviews.freebsd.org/D36832
Diffstat (limited to 'sys/gnu/fs/xfs')
0 files changed, 0 insertions, 0 deletions