cirno/plan9port
1
0
Fork 0
mirror of https://github.com/9fans/plan9port.git synced 2025-01-12 11:10:07 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

plumber: fail on buffer exhaustion or runaway quotes in string expansion

Browse source
This commit is contained in:
Igor Burago 2022-08-16 20:25:27 +08:00 committed by Dan Cross
parent a4af25bc0d
commit e4b913866b
1 changed files with 25 additions and 11 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

34
src/cmd/plumb/rules.c
View file

@ -289,17 +289,30 @@ dollar(Exec *e, char *s, int *namelen)
return variable(s, n);
}
static void
ruleerror(char *msg)
{
if(parsing){
parsing = 0;
parseerror("%s", msg);
}
error("%s", msg);
}
/* expand one blank-terminated string, processing quotes and $ signs */
char*
expand(Exec *e, char *s, char **ends)
{
char *p, *ep, *val;
int namelen, quoting;
int namelen, vallen, quoting, inputleft;
p = ebuf;
ep = ebuf+sizeof ebuf-1;
quoting = 0;
while(p<ep && *s!='\0' && (quoting || (*s!=' ' && *s!='\t'))){
for(;;){
inputleft = (*s!='\0' && (quoting || (*s!=' ' && *s!='\t')));
if(!inputleft || p==ep)
break;
if(*s == '\''){
s++;
if(!quoting)
@ -321,12 +334,17 @@ expand(Exec *e, char *s, char **ends)
*p++ = '$';
continue;
}
if(ep-p < strlen(val))
return "string-too-long";
vallen = strlen(val);
if(ep-p < vallen)
break;
strcpy(p, val);
p += strlen(val);
p += vallen;
s += namelen;
}
if(inputleft)
ruleerror("expanded string too long");
else if(quoting)
ruleerror("runaway quoted string literal");
if(ends)
*ends = s;
*p = '\0';
@ -336,11 +354,7 @@ expand(Exec *e, char *s, char **ends)
void
regerror(char *msg)
{
if(parsing){
parsing = 0;
parseerror("%s", msg);
}
error("%s", msg);
ruleerror(msg);
}
void