bug #408: prevent invalid data or crash by not reading beyond end of string

2019-07-28 16:21:28 +02:00 · 2019-07-28 16:21:28 +02:00 · 0fbff063b8
parent 30565e45c4
commit 0fbff063b8
1 changed files with 2 additions and 1 deletions
--- a/src/frontend/parser/backq.c
+++ b/src/frontend/parser/backq.c
@ -44,7 +44,8 @@ cp_bquote(wordlist *wlist)
            *s++ = *t++;
        /* What the heck, let "echo `foo" work... */
        *s = '\0';
-        t++;    /* Get past the second ` */
+        if (*t != '\0')
+            t++;    /* Get past the second ` */
        if ((nwl = backeval(buf)) == NULL) {
            wlist->wl_word = NULL;
            return (wlist);