bug: string.format("%") reads past the string

This commit is contained in:
Roberto Ierusalimschy
2006-09-18 13:33:14 -03:00
parent 8667f29c3b
commit 93d3c8450c
2 changed files with 56 additions and 2 deletions

View File

@@ -1,5 +1,5 @@
/*
** $Id: lstrlib.c,v 1.133 2006/06/22 16:12:59 roberto Exp roberto $
** $Id: lstrlib.c,v 1.134 2006/09/11 14:07:24 roberto Exp roberto $
** Standard library for string operations and pattern-matching
** See Copyright Notice in lua.h
*/
@@ -723,7 +723,7 @@ static void addquoted (lua_State *L, luaL_Buffer *b, int arg) {
static const char *scanformat (lua_State *L, const char *strfrmt, char *form) {
const char *p = strfrmt;
while (strchr(FLAGS, *p)) p++; /* skip flags */
while (*p != '\0' && strchr(FLAGS, *p) != NULL) p++; /* skip flags */
if ((size_t)(p - strfrmt) >= sizeof(FLAGS))
luaL_error(L, "invalid format (repeated flags)");
if (isdigit(uchar(*p))) p++; /* skip width */