From 6a77561e31193a2e256cbd4a2a267fe905fa868c Mon Sep 17 00:00:00 2001 From: ocean Date: Fri, 3 Feb 2006 06:11:13 +0000 Subject: * ext/syck/syck.c (syck_move_tokens): should reset p->cursor or etc even if skip == 0. This causes buffer overrun. (ex: YAML.load('--- "..' + '\x82\xA0' * 511 + '"')) git-svn-id: http://svn.ruby-lang.org/repos/ruby/branches/ruby_1_8@9878 b2dd03c8-39d4-4d8f-98ff-823fe69b080e --- ChangeLog | 6 ++++++ 1 file changed, 6 insertions(+) (limited to 'ChangeLog') diff --git a/ChangeLog b/ChangeLog index d5b31a99f..18a92b7fd 100644 --- a/ChangeLog +++ b/ChangeLog @@ -1,3 +1,9 @@ +Fri Feb 3 15:06:50 2006 Hirokazu Yamamoto + + * ext/syck/syck.c (syck_move_tokens): should reset p->cursor or etc + even if skip == 0. This causes buffer overrun. + (ex: YAML.load('--- "..' + '\x82\xA0' * 511 + '"')) + Thu Feb 2 23:51:18 2006 Hirokazu Yamamoto * ext/syck/emitter.c (syck_emitter_write): should not set '\0' on -- cgit