Age | Commit message (Collapse) | Author | |
---|---|---|---|
2010-04-14 | Fix check for compile workspace overflow | Michael Santos | |
Patch from: http://vcs.pcre.org/viewvc/code/trunk/pcre_compile.c?r1=504&r2=505&view=patch Test case: N = 819, re:compile([lists:duplicate(N, $(), lists:duplicate(N, $))]). Compiling large regular expressions could overflow the workspace buffer. Modify the test to check for a value smaller than the buffer size. | |||
2010-02-11 | Fix CVE-2008-2371 (outer level option with alternatives caused crash). | Michael Santos | |
The patch is from: http://vcs.pcre.org/viewvc?revision=360&view=revision Test case: re:compile(<<"(?i)[\xc3\xa9\xc3\xbd]|[\xc3\xa9\xc3\xbdA]">>, [unicode]). An option change at the start of a pattern that had top-level alternatives could cause overwriting and/or a crash. This potential security problem was recorded as CVE-2008-2371. | |||
2009-11-20 | The R13B03 release.OTP_R13B03 | Erlang/OTP | |