PSPP-BUG: [bug #47602] Possible seg fault when syntax file has no terminating newline.

[John Darrington]

URL:
  <http://savannah.gnu.org/bugs/?47602>

                 Summary: Possible seg fault when syntax file has no
terminating newline.
                 Project: PSPP
            Submitted by: jmd
            Submitted on: Fri 01 Apr 2016 08:48:59 PM CEST
                Category: Syntax Parser
                Severity: 5 - Average
                  Status: None
             Assigned to: None
             Open/Closed: Open
         Discussion Lock: Any
                 Release: None
                  Effort: 0.00

    _______________________________________________________

Details:

The attached file (which has no trailing newline) shows Invalid Read in
valgrind, and sometimes crashes:

 Conditional jump or move depends on uninitialised value(s)
==21588==    at 0x402FEF5: rawmemchr (vg_replace_strmem.c:1240)
==21588==    by 0x4058858: lex_source_get__ (lexer.c:1413)
==21588==    by 0x4056888: lex_get (lexer.c:228)
==21588==    by 0x4057E48: lex_discard_rest_of_command (lexer.c:1106)
==21588==    by 0x4054FD8: do_parse_command (command.c:244)
==21588==    by 0x4054C95: cmd_parse_in_state (command.c:148)
==21588==    by 0x4054D6B: cmd_parse (command.c:163)
==21588==    by 0x804A50D: main (main.c:138)
==21588== 
==21588== Invalid read of size 1
==21588==    at 0x402FEF3: rawmemchr (vg_replace_strmem.c:1240)
==21588==    by 0x4058858: lex_source_get__ (lexer.c:1413)
==21588==    by 0x4056888: lex_get (lexer.c:228)
==21588==    by 0x4057E48: lex_discard_rest_of_command (lexer.c:1106)
==21588==    by 0x4054FD8: do_parse_command (command.c:244)
==21588==    by 0x4054C95: cmd_parse_in_state (command.c:148)
==21588==    by 0x4054D6B: cmd_parse (command.c:163)
==21588==    by 0x804A50D: main (main.c:138)
==21588==  Address 0x51db480 is 0 bytes after a block of size 64 alloc'd
==21588==    at 0x40291CC: malloc (vg_replace_malloc.c:296)
==21588==    by 0x402B378: realloc (vg_replace_malloc.c:692)
==21588==    by 0x41FE346: xrealloc (xmalloc.c:61)




    _______________________________________________________

File Attachments:


-------------------------------------------------------
Date: Fri 01 Apr 2016 08:48:59 PM CEST  Name: dl.sps  Size: 53B   By: jmd

<http://savannah.gnu.org/bugs/download.php?file_id=36822>

    _______________________________________________________

Reply to this item at:

  <http://savannah.gnu.org/bugs/?47602>

_______________________________________________
  Message sent via/by Savannah
  http://savannah.gnu.org/