ezxml: cherry-pick the patch from netcdf

Unidata/netcdf-c#2125 Fix CVE-2022-30045 Reported: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1014391 See https://gitlab.com/scilab/scilab/-/merge_requests/1
GerHobbelt · Nov 3, 2022 · f9fe7c9 · f9fe7c9
1 parent 7bc6c56
commit f9fe7c9
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/scilab/modules/scicos/src/c/ezxml.c b/scilab/modules/scicos/src/c/ezxml.c
@@ -303,6 +303,11 @@ char *ezxml_decode(char *s, char **ent, char t)
 
                 if (e)
                 {
+                    if(c > strlen(s) || strlen(e) > strlen(s + c)) {
+                        fprintf(stderr, "Error: ezxml_decode(): memmove() past end of buffer!");
+                        exit(-1);
+                    }
+
                     memmove(s + c, e + 1, strlen(e)); // shift rest of string
                     strncpy(s, ent[b], c); // copy in replacement text
                 }