diff options
author | Ori Bernstein <ori@eigenstate.org> | 2020-11-21 17:56:34 -0800 |
---|---|---|
committer | Ori Bernstein <ori@eigenstate.org> | 2020-11-21 17:56:34 -0800 |
commit | ad9b1234c365919fa9d8cdb3008b4d42acf37c60 (patch) | |
tree | 73999d3d9f6b62ddc8395815fc660114a55d2cda /sys/src/cmd/python/Python/dynload_hpux.c | |
parent | 03f209427b97f100a55fb490f8bc0332eda2db95 (diff) |
dc: fix crashes with : operator (thanks istvan bak)
dc crashes because a Blk* sometimes ends getting double freed.
To make it crash, any of these lines will do:
(each line is a separate input to dc):
1 sa 2 :a le d sa v :a
1 sa 2 :a le d sa :a
1 sa 2 :a le d sa c
Fix by assigning p to sptr->val before EMTPY causes a jump.
Additionally, dcgetwd() can return 0. all other uses check for
0 ptr; Also fix a buffer overflow.
Diffstat (limited to 'sys/src/cmd/python/Python/dynload_hpux.c')
0 files changed, 0 insertions, 0 deletions