GNU bug report logs - #10953
Potential logical bug in readtokens.c

Previous Next

Package: coreutils;

Reported by: Xu Zhongxing <xu_zhong_xing <at> 163.com>

Date: Tue, 6 Mar 2012 08:18:02 UTC

Severity: normal

Done: Paul Eggert <eggert <at> cs.ucla.edu>

Bug is archived. No further changes may be made.

Full log


View this message in rfc822 format

From: help-debbugs <at> gnu.org (GNU bug Tracking System)
To: Xu Zhongxing <xu_zhong_xing <at> 163.com>
Subject: bug#10953: closed (Re: bug#10953: Potential logical bug in
 readtokens.c)
Date: Wed, 07 Mar 2012 19:59:02 +0000
[Message part 1 (text/plain, inline)]
Your bug report

#10953: Potential logical bug in readtokens.c

which was filed against the coreutils package, has been closed.

The explanation is attached below, along with your original report.
If you require more details, please reply to 10953 <at> debbugs.gnu.org.

-- 
10953: http://debbugs.gnu.org/cgi/bugreport.cgi?bug=10953
GNU Bug Tracking System
Contact help-debbugs <at> gnu.org with problems
[Message part 2 (message/rfc822, inline)]
From: Paul Eggert <eggert <at> cs.ucla.edu>
To: Jim Meyering <jim <at> meyering.net>
Cc: Xu Zhongxing <xu_zhong_xing <at> 163.com>, 10953-done <at> debbugs.gnu.org
Subject: Re: bug#10953: Potential logical bug in readtokens.c
Date: Wed, 07 Mar 2012 11:56:48 -0800
On 03/07/2012 11:52 AM, Jim Meyering wrote:
> Here's a proposed readtokens test module:

I took a quick look, and it looks fine, thanks.

The bug's fixed now, so I'm marking it as 'done'.

[Message part 3 (message/rfc822, inline)]
From: Xu Zhongxing <xu_zhong_xing <at> 163.com>
To: bug-coreutils <at> gnu.org
Subject: Potential logical bug in readtokens.c
Date: Tue, 06 Mar 2012 13:58:59 +0800
Hi,

I think I found a potential bug. But I am not sure about it. It looks
real from the code.

For coreutils 8.15, in file readtokens.c, function readtoken()

If delim is NULL, and saved_delim is not NULL, then the condition on
line 75 is not satisfied, but the condition on line 79 is satisfied.

In this case, there could be NULL pointer deference for delim[i] in line 84.


- Zhongxing Xu




This bug report was last modified 13 years and 157 days ago.

Previous Next


GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.