Unverified Commit bc8d837b authored by zhangtaoXT5's avatar zhangtaoXT5 Committed by GitHub
Browse files

fix heap-buffer-overflow (#957)



Prevent incrementing passed a `\0` in our format string.
Co-authored-by: default avatarMichael Grunder <michael.grunder@gmail.com>
Co-authored-by: default avatarKristján Valur Jónsson <sweskman@gmail.com>
parent ca4a0e85
...@@ -485,6 +485,8 @@ int redisvFormatCommand(char **target, const char *format, va_list ap) { ...@@ -485,6 +485,8 @@ int redisvFormatCommand(char **target, const char *format, va_list ap) {
touched = 1; touched = 1;
c++; c++;
if (*c == '\0')
break;
} }
c++; c++;
} }
......
Markdown is supported
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment