[pcre-dev] bugs in PCRE

Page principale
Supprimer ce message
Auteur: Sebastian Gottschalk
Date:  
À: pcre-dev
Sujet: [pcre-dev] bugs in PCRE
Dear Sir or Madam,

I found some bugs in Pcre 7.6.

1. pcre_compile.c line 1970 accesses the variable 'othercase' which might be
unintialized.

2. pcreposix.c 3=lines 312,313 access 'ovector', which might still be NULL
(even after the call to pcre_exec()). Line 316 accessed 'i', which might be
uninitialized.

3. pcrepp.c lines 657,665 call isspace() and isdigit() on a const char, but
they require an unsigned char. Since their signature allows for 'int',
there's no implicit conversion taking place.

Sincerely,
Sebastian Gottschalk