Page MenuHomeFreeBSD

ee: Improve handling of malformed UTF-8 characters
ClosedPublic

Authored by markj on Jul 1 2026, 4:46 PM.
Tags
None
Referenced Files
F174933935: D57996.diff
Wed, Oct 7, 1:41 AM
Unknown Object (File)
Mon, Oct 5, 11:53 PM
Unknown Object (File)
Mon, Oct 5, 7:42 AM
Unknown Object (File)
Sun, Oct 4, 2:51 PM
Unknown Object (File)
Thu, Oct 1, 9:07 PM
Unknown Object (File)
Sat, Sep 12, 2:16 PM
Unknown Object (File)
Fri, Sep 11, 1:40 AM
Unknown Object (File)
Thu, Sep 10, 9:46 PM
Subscribers

Details

Summary

In delete(), when copying the deleted character to the d_char buffer,
don't assume that it fits. utf8_prev() may return a sequence of more
than 5 bytes.

In insert_utf8(), fix the copy-up of the line. We extended the line by
"len" bytes, so "temp" has to be repositioned accordingly. Compare with
plain insert().

Use sizeof when copying to buffers instead of hard-coding buffer sizes.

Don't dynamically allocate d_char, there is no need.

Fixes: 62fba0054d9e ("ee: add unicode support")
Reported by: Sayono Hiragi (overflow in delete())

Diff Detail

Repository
rG FreeBSD src repository
Lint
Lint Skipped
Unit
Tests Skipped
Build Status
Buildable 74465
Build 71348: arc lint + arc unit