diff options
| author | Joseph Bisch <joseph.bisch@gmail.com> | 2017-09-18 21:40:57 -0400 |
|---|---|---|
| committer | TingPing <tingping@tingping.se> | 2017-09-18 22:01:48 -0400 |
| commit | f4a592c4f0364d35068bca9f2634946750340356 (patch) | |
| tree | db6e2996b8fc025a77ea9e1740aa07f0a3868061 /src/common/servlist.h | |
| parent | a388d0c553f495719204662515945b4c6e0cbdad (diff) | |
Fix oob read caused by ptr[0] being NULL in inbound_notice
If ptr[0] is NULL, then strchr may return a pointer to the NULL
terminator for serv->nick_prefixes, making the if statement true, which
then leads to the pointer increment leaving ptr oob. Now we check to
ensure ptr[0] != NULL.
From the Linux manpages for strchr:
The terminating null byte is considered part of the string, so that if c is
specified as '\0', these functions return a pointer to the terminator.
Diffstat (limited to 'src/common/servlist.h')
0 files changed, 0 insertions, 0 deletions