Stowage/clamav
2
0
Fork 0
mirror of https://github.com/Cisco-Talos/clamav.git synced 2025-10-19 10:23:17 +00:00
Code Issues Projects Releases Packages Wiki Activity

Fix NULL-dereference crash with some command line options

Browse source 
It is possible to crash freshclam and probably other programs like this:
```
freshclam --datadir /any/path
```

CLAM-2860
This commit is contained in:
Val S. 2025-09-02 16:18:42 -04:00
parent c11ac06e0e
commit d14bbe2fda
No known key found for this signature in database
GPG key ID: 3A7D293D8274CA1B
1 changed files with 11 additions and 9 deletions
Download patch file Download diff file Expand all files Collapse all files

20
common/optparser.c
View file

@ -1253,15 +1253,17 @@ struct optstruct *optparse(const char *cfgfile, int argc, char **argv, int verbo
}
}
/* Find and remove inline comments. */
numarg = -1;
inlinecomment = strchr(arg, '#');
if (inlinecomment != NULL) {
/* Found a '#', indicating an inline comment. Strip it off along with any leading spaces or tabs. */
arg = strtok(arg, "#");
trim_comment = arg + strlen(arg) - 1;
while (trim_comment >= arg && (*trim_comment == ' ' || *trim_comment == '\t')) {
*(trim_comment--) = '\0';
if (NULL != arg) {
/* Find and remove inline comments. */
numarg = -1;
inlinecomment = strchr(arg, '#');
if (inlinecomment != NULL) {
/* Found a '#', indicating an inline comment. Strip it off along with any leading spaces or tabs. */
arg = strtok(arg, "#");
trim_comment = arg + strlen(arg) - 1;
while (trim_comment >= arg && (*trim_comment == ' ' || *trim_comment == '\t')) {
*(trim_comment--) = '\0';
}
}
}