shithub: mc

Download patch

ref: 059eaf0d4366d07da1caa936ebdb5496bb7626b6
parent: dabed9c4d7c7b367b08a4b2ede1b27f2d218052b
author: Ori Bernstein <[email protected]>
date: Tue Nov 12 14:29:33 EST 2013

More range checking.

    Make sure that we're not adding bad hex values to integers.

--- a/parse/tok.c
+++ b/parse/tok.c
@@ -526,7 +526,7 @@
             continue;
         if (c == '.')
             isfloat = 1;
-        else if (hexval(c) > base)
+        else if (hexval(c) < 0 || hexval(c) > base)
             fatal(line, "Integer digit '%c' outside of base %d", c, base);
     }