[Bug 233343] [libedit] bind command reads out of bounds

[bugzilla-noreply at freebsd.org]

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=233343

--- Comment #11 from commit-hook at freebsd.org ---
A commit references this bug:

Author: jilles
Date: Wed Jan 16 21:59:19 UTC 2019
New revision: 343105
URL: https://svnweb.freebsd.org/changeset/base/343105

Log:
  libedit: Avoid out of bounds read in 'bind' command

  This is CVS revision 1.31 from NetBSD lib/libedit/chartype.c:
  Make sure that argv is NULL terminated since functions like tty_stty rely
  on it to be so (Gerry Swinslow)

  This broke when the wide-character support was enabled in libedit. The
  conversion from multibyte to wide-character did not supply the apparently
  expected terminating NULL in the new argv array.

  PR:           233343
  Submitted by: Yuichiro NAITO
  Obtained from:        NetBSD
  MFC after:    1 week

Changes:
  head/lib/libedit/chartype.c

-- 
You are receiving this mail because:
You are the assignee for the bug.