This is a live mirror of the Perl 5 development currently hosted at https://github.com/perl/perl5
heap-buffer-overflow
authorKarl Williamson <khw@cpan.org>
Tue, 17 Apr 2018 04:13:30 +0000 (22:13 -0600)
committerKarl Williamson <khw@cpan.org>
Tue, 17 Apr 2018 04:33:49 +0000 (22:33 -0600)
commitf8fb8615ddc5a80e3bbd4386a8914497f921b62d
tree75c2731c119cedfc53fc5a4732f0073192f8f432
parent5927ddccd733e5d8252ce3866c027c042d2f98aa
heap-buffer-overflow

The fix is simpler than in the maintenance releases due to prior changes
in 5.27.

The problem is that under some circumstances the sharp s takes up two
bytes when space for only one had been allocated.  Just the right set of
circumstances are required for this to happen.
regcomp.c
t/re/pat.t