CVSROOT: /cvs
Module name: src
Changes by: [email protected] 2026/10/24 12:08:57
Modified files:
lib/libc/gen : glob.c
Log message:
Fix out-of-bounds read on on missing right bracket after character class.
The original code checked for a closing bracket before parsing the
bracket expression. When character class support was added, that
closing bracket can now be part of the character class instead.
Add another check for the closing bracket after parsing character
classes and roll back if we don't find one.
Adapted from an OpenSSH bug report. OK djm@
