2 commits

Author	SHA1	Message	Date
Paul Smith	04f4c2b8d9	[SV 64124] Avoid stack overflows for large command lines ... Modify areas dealing with large command lines to use the heap rather than relying on alloca / stack space. * src/main.c (main): Allocate potentially large buffers with xmalloc. (decode_env_switches): Ditto. * src/function.c (func_error): Replace alloca with xmalloc/free. * tests/scripts/features/expand: Add a newline for readable diffs.	2023-06-19 13:27:50 -04:00
Dmitry Goncharov	06c75a35b9	[SV 64124] Avoid use-after-free in expand_variable_buf() ... When the expanded value of the variable in buf occupies more space than available in variable_buffer, function variable_buffer_output reallocates variable_buffer: return a pointer into the new memory, not the old memory. * src/expand.c (expand_variable_buf): Preserve the offset of buf and return that offset into the (potentially reallocated) buffer. * tests/scripts/features/expand: Add tests.	2023-04-30 09:41:02 -04:00