diff options
| author | Nobuyoshi Nakada <[email protected]> | 2017-03-13 23:49:49 +0900 |
|---|---|---|
| committer | Nobuyoshi Nakada <[email protected]> | 2017-03-13 23:56:33 +0900 |
| commit | d8c4fe7bcb07b4268184b526652311f28f0ce3a5 (patch) | |
| tree | 2463f49757b68094abf5b0655d17efeb434ec258 /mrbgems/mruby-sprintf/src/sprintf.c | |
| parent | 191ee2596cc7b22e3213d82bab1a48ae6152b475 (diff) | |
| download | mruby-d8c4fe7bcb07b4268184b526652311f28f0ce3a5.tar.gz mruby-d8c4fe7bcb07b4268184b526652311f28f0ce3a5.zip | |
Fix out-of-bound access
Get rid of out-of-bound access when single % at the end.
Diffstat (limited to 'mrbgems/mruby-sprintf/src/sprintf.c')
| -rw-r--r-- | mrbgems/mruby-sprintf/src/sprintf.c | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/mrbgems/mruby-sprintf/src/sprintf.c b/mrbgems/mruby-sprintf/src/sprintf.c index cc00198d0..09a26f827 100644 --- a/mrbgems/mruby-sprintf/src/sprintf.c +++ b/mrbgems/mruby-sprintf/src/sprintf.c @@ -567,6 +567,7 @@ mrb_str_format(mrb_state *mrb, int argc, const mrb_value *argv, mrb_value fmt) mrb_sym id = 0; for (t = p; t < end && *t != '%'; t++) ; + if (t + 1 == end) ++t; PUSH(p, t - p); if (t >= end) goto sprint_exit; /* end of fmt string */ |