From owner-cvs-all Tue Oct 8 4:22:51 2002 Delivered-To: cvs-all@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 2DD2B37B401; Tue, 8 Oct 2002 04:22:50 -0700 (PDT) Received: from freefall.freebsd.org (freefall.freebsd.org [216.136.204.21]) by mx1.FreeBSD.org (Postfix) with ESMTP id D1A4C43E81; Tue, 8 Oct 2002 04:22:49 -0700 (PDT) (envelope-from tjr@FreeBSD.org) Received: from freefall.freebsd.org (tjr@localhost [127.0.0.1]) by freefall.freebsd.org (8.12.6/8.12.6) with ESMTP id g98BMnCo051304; Tue, 8 Oct 2002 04:22:49 -0700 (PDT) (envelope-from tjr@freefall.freebsd.org) Received: (from tjr@localhost) by freefall.freebsd.org (8.12.6/8.12.6/Submit) id g98BMnrd051303; Tue, 8 Oct 2002 04:22:49 -0700 (PDT) Message-Id: <200210081122.g98BMnrd051303@freefall.freebsd.org> From: "Tim J. Robbins" Date: Tue, 8 Oct 2002 04:22:49 -0700 (PDT) To: cvs-committers@FreeBSD.org, cvs-all@FreeBSD.org Subject: cvs commit: src/bin/sh expand.c X-FreeBSD-CVS-Branch: HEAD Sender: owner-cvs-all@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG tjr 2002/10/08 04:22:49 PDT Modified files: bin/sh expand.c Log: Do not strip CTL* escapes from redirection filenames in argstr(); they are later stripped with rmescapes() in expandarg(). If the filename has already been unescaped, doing it again in rmescapes() can walk off the end of the string, leading to memory corruption and eventually SIGSEGV. Noticed by: kris Revision Changes Path 1.39 +1 -1 src/bin/sh/expand.c To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe cvs-all" in the body of the message