nhyatt/putty-source
1
0
Fork 0
mirror of https://git.tartarus.org/simon/putty.git synced 2025-01-09 09:27:59 +00:00
Code Issues Projects Releases Wiki Activity

Tighten assertions in Windows wc_to_mb.

Browse Source 
This assertion was supposed to be checking for the buffer overrun
fixed by the previous commit, but because it checks the buffer index
just _after_ writing into the buffer, it would have permitted a
one-byte overrun before failing the assertion.
This commit is contained in:
Simon Tatham 2019-07-02 21:22:01 +01:00
parent 54cd853a49
commit 11f504c440
1 changed files with 18 additions and 11 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

29
windows/winucs.c
View File

@ -1170,21 +1170,28 @@ int wc_to_mb(int codepage, int flags, const wchar_t *wcstr, int wclen,
wchar_t ch = wcstr[i];
int by;
char *p1;
if (ucsdata->uni_tbl && (p1 = ucsdata->uni_tbl[(ch >> 8) & 0xFF])
&& (by = p1[ch & 0xFF]))
*p++ = by;
#define WRITECH(chr) do \
{ \
assert(p - mbstr < mblen); \
*p++ = (char)(chr); \
} while (0)
if (ucsdata->uni_tbl &&
(p1 = ucsdata->uni_tbl[(ch >> 8) & 0xFF]) != NULL &&
(by = p1[ch & 0xFF]) != '\0')
WRITECH(by);
else if (ch < 0x80)
*p++ = (char) ch;
else if (defchr) {
int j;
for (j = 0; defchr[j]; j++)
*p++ = defchr[j];
}
WRITECH(ch);
else if (defchr)
for (const char *q = defchr; *q; q++)
WRITECH(*q);
#if 1
else
*p++ = '.';
WRITECH('.');
#endif
assert(p - mbstr < mblen);
#undef WRITECH
}
return p - mbstr;
} else {