sergiotarxz/nuttx
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

libc: stdio: Fix NULL pointer dereference in ungetc(). If 'stream' was NULL, 'stream->fs_oflags' was evaluated. From Juha Niskanen

Browse Source
This commit is contained in:
Gregory Nutt 2015-03-12 07:51:23 -06:00
parent af6d9e2684
commit c39725b398
1 changed files with 9 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

11
libc/stdio/lib_ungetc.c
View File

@ -94,10 +94,17 @@ int ungetc(int c, FAR FILE *stream)
int nungotten; int nungotten;
#endif #endif
/* Verify that a non-NULL stream was provided */
if (!stream)
{
set_errno(EBADF);
return EOF;
}
/* Stream must be open for read access */ /* Stream must be open for read access */
if ((stream && stream->fs_fd < 0) || if ((stream->fs_fd < 0) || ((stream->fs_oflags & O_RDOK) == 0))
((stream->fs_oflags & O_RDOK) == 0))
{ {
set_errno(EBADF); set_errno(EBADF);
return EOF; return EOF;