luke
/
ngspice
mirror of https://git.code.sf.net/p/ngspice/ngspice
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Apply Patch #119 - 

"Fix buffer overflow in src/xspice/icm/digital/d_state/cfunc.mod".
The change is not identical to the supplied patch. It was slightly
modified to make the original code more sane.
Found and patched by Artem Sinkevich.
This commit is contained in:
Giles Atkinson 2024-11-20 21:42:23 +00:00 committed by Holger Vogt
parent abc3fceb7e
commit 5980869040
1 changed files with 4 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
src/xspice/icm/digital/d_state/cfunc.mod
View File

@ -1365,14 +1365,15 @@ static int cm_read_state_file(FILE *state_file, State_Table_t *table)
} }
i = 0; i = 0;
s = temp; while (fgets(temp, MAX_STRING_SIZE, state_file) != NULL) {
while ( fgets(s,MAX_STRING_SIZE,state_file) != NULL) {
/* Test this string to see if it is whitespace... */ /* Test this string to see if it is whitespace... */
s = temp;
base_address = s; base_address = s;
while(isspace_c(*s) || (*s == '*')) while(isspace_c(*s) || (*s == '*'))
(s)++; (s)++;
if ( *s != '\0' ) { /* This is not a blank line, so process... */ if ( *s != '\0' ) {
/* This is not a blank line, so process... */
s = base_address; s = base_address;
if ( '*' != s[0] ) { if ( '*' != s[0] ) {
@ -1571,7 +1572,6 @@ static int cm_read_state_file(FILE *state_file, State_Table_t *table)
} }
i++; i++;
} }
s = temp;
} }
} }
return 0; return 0;