|
|
Message-ID: <e8f9f75f-9aef-e771-e6ad-4045e6fcbf1e@cs.utah.edu>
Date: Thu, 19 May 2016 17:28:58 +0200
From: John Regehr <regehr@...utah.edu>
To: musl@...ts.openwall.com
Subject: uninitialized variable
This call:
regcomp(&r, "^(b+|||(CW*)*|){5,}{53}*+)^?5,}", REG_EXTENDED);
ends up using uninitialized memory like so:
regcomp.c:221:[kernel] warning: accessing uninitialized left-value:
assert \initialized(&right->num_submatches);
stack: tre_ast_new_catenation :: regcomp.c:1764 <-
tre_copy_ast :: regcomp.c:1916 <-
tre_expand_ast :: regcomp.c:2771 <-
musl_regcomp :: foo.c:9 <-
main
Having crap in this field seems bad since it is used to compute a malloc
size.
John
Powered by blists - more mailing lists
Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.