diff options
| author | Matthew Vernon <matthew@debian.org> | 2017-03-21 22:01:27 +0000 |
|---|---|---|
| committer | Matthew Vernon <matthew@debian.org> | 2017-03-21 22:01:27 +0000 |
| commit | c4c2c7c4f74d53b263af2471d8e11db88096bd13 (patch) | |
| tree | 215892bd9e3ca47215f5a4636b2b37f25ee1af55 /pcre_internal.h | |
| parent | 0d6f7a2e36f965826f8ebf5dd60ecabcf6824c16 (diff) | |
Upstream fix for CVE-2017-7186 (Upstream rev 1688)
Fix Unicode property crash for 32-bit characters greater than 0x10ffff.
Diffstat (limited to 'pcre_internal.h')
| -rw-r--r-- | pcre_internal.h | 11 |
1 files changed, 10 insertions, 1 deletions
diff --git a/pcre_internal.h b/pcre_internal.h index 2923b29..154d3f6 100644 --- a/pcre_internal.h +++ b/pcre_internal.h @@ -2772,6 +2772,9 @@ extern const pcre_uint8 PRIV(ucd_stage1)[]; extern const pcre_uint16 PRIV(ucd_stage2)[]; extern const pcre_uint32 PRIV(ucp_gentype)[]; extern const pcre_uint32 PRIV(ucp_gbtable)[]; +#ifdef COMPILE_PCRE32 +extern const ucd_record PRIV(dummy_ucd_record)[]; +#endif #ifdef SUPPORT_JIT extern const int PRIV(ucp_typerange)[]; #endif @@ -2780,9 +2783,15 @@ extern const int PRIV(ucp_typerange)[]; /* UCD access macros */ #define UCD_BLOCK_SIZE 128 -#define GET_UCD(ch) (PRIV(ucd_records) + \ +#define REAL_GET_UCD(ch) (PRIV(ucd_records) + \ PRIV(ucd_stage2)[PRIV(ucd_stage1)[(int)(ch) / UCD_BLOCK_SIZE] * \ UCD_BLOCK_SIZE + (int)(ch) % UCD_BLOCK_SIZE]) + +#ifdef COMPILE_PCRE32 +#define GET_UCD(ch) ((ch > 0x10ffff)? PRIV(dummy_ucd_record) : REAL_GET_UCD(ch)) +#else +#define GET_UCD(ch) REAL_GET_UCD(ch) +#endif #define UCD_CHARTYPE(ch) GET_UCD(ch)->chartype #define UCD_SCRIPT(ch) GET_UCD(ch)->script |