diff options
| author | Luke Wilde <lukew@serenityos.org> | 2021-09-10 23:04:36 +0100 |
|---|---|---|
| committer | Andreas Kling <kling@serenityos.org> | 2021-10-02 17:16:09 +0200 |
| commit | ae0bdda86e9946e8fc09db0c4dc044b2d975d7fa (patch) | |
| tree | 5d485da3aab758e5a881d5c74a12431bcbfddb90 /AK | |
| parent | bb6634b0247bf6d8b70f6baeadde4cc11d4ee1ee (diff) | |
| download | serenity-ae0bdda86e9946e8fc09db0c4dc044b2d975d7fa.zip | |
LibJS: Remove read buffer overflow in Lexer::consume
The position is added to manually in the line terminator and Unicode
character cases. While it checks for EOF after doing so, the EOF check
used `!=` instead of `<`, meaning if the position went _over_ the
source length, it wouldn't think it was EOF and would cause read buffer
overflows.
For example, `0xea` followed by `0xfd` would cause this.
Diffstat (limited to 'AK')
0 files changed, 0 insertions, 0 deletions