blob: c362bd3fce22d854a96beb65c34bf1df52b1f141 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
|
$NetBSD: patch-CVE-2018-7548,v 1.1 2018/03/30 20:56:42 spz Exp $
patch for CVE-2018-7548 from
https://sourceforge.net/p/zsh/code/ci/110b13e1090bc31ac1352b28adc2d02b6d25a102
--- Src/subst.c.orig 2017-04-04 17:51:28.000000000 +0000
+++ Src/subst.c 2018-03-30 19:48:41.000000000 +0000
@@ -2340,7 +2340,7 @@
val = aval[0];
isarr = 0;
}
- s = dyncat(val, s);
+ s = val ? dyncat(val, s) : dupstring(s);
/* Now behave po-faced as if it was always like that... */
subexp = 0;
/*
|
