Hi, just bumping this thread one last time.

Please let me know if there is some contribution guideline I’m not following 
correctly, or if there is some other reason for not accepting this patch.

Cheers, Karsten


> On 18/04/2023, at 3:24 PM, Karsten Sperling <ksperl...@apple.com> wrote:
> 
> Commit daa66ed6 fixed a number of use-after-free bugs in bash pattern 
> substitution, however one "unguarded" STPUTC remained, which is fixed here.
> 
> Signed-off-by: Karsten Sperling <ksperl...@apple.com>
> ---
> shell/ash.c | 2 ++
> 1 file changed, 2 insertions(+)
> 
> diff --git a/shell/ash.c b/shell/ash.c
> index d2c5c5d50..51b627fcc 100644
> --- a/shell/ash.c
> +++ b/shell/ash.c
> @@ -7370,6 +7370,8 @@ subevalvar(char *start, char *str, int strloc,
>                                char *restart_detect = stackblock();
>                                if (quotes && *loc == '\\') {
>                                        STPUTC(CTLESC, expdest);
> +                                       if (stackblock() != restart_detect)
> +                                               goto restart;
>                                        len++;
>                                }
>                                STPUTC(*loc, expdest);
> --  2.39.0
> 

_______________________________________________
busybox mailing list
busybox@busybox.net
http://lists.busybox.net/mailman/listinfo/busybox

Reply via email to