mir/sudo
2
0
Fork 0
mirror of https://github.com/sudo-project/sudo.git synced 2025-08-22 01:49:11 +00:00
Code Issues Releases Wiki Activity

Avoid invalid read when minval > maxval

Browse Source
This commit is contained in:
Todd C. Miller 2019-10-24 18:35:45 -06:00
parent 271ead2fd3
commit aa99594575
1 changed files with 6 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
lib/util/strtonum.c
View File

@ -173,8 +173,12 @@ done:
*errstrp = N_("value too large");
break;
}
if (endp != NULL)
*endp = (char *)(errval == STN_INITIAL ? str : cp - 1);
if (endp != NULL) {
if (errval == STN_INITIAL || errval == STN_INVALID)
*endp = (char *)str;
else
*endp = (char *)(cp - 1);
}
return result;
}