summaryrefslogtreecommitdiff
path: root/Build/source/texk/web2c/ChangeLog
diff options
context:
space:
mode:
authorAndreas Scherer <andreas_tex@freenet.de>2023-07-17 15:15:21 +0000
committerAndreas Scherer <andreas_tex@freenet.de>2023-07-17 15:15:21 +0000
commit9d29307dcb777eb5399b047b75e6e454234fa5e4 (patch)
tree872192aedf2324fdfef3a8b68128aafd78593c19 /Build/source/texk/web2c/ChangeLog
parent0f0235553c87bac50fae9bfabd6aa81c619a29ae (diff)
[C/WEB] Deal with malign user input.
'break_out' and 'flush_buffer' were tricked into putting an extremely long TeX macro (longer than 'line_length', i.e., 80 chars) into 'out_buf', which overflowed. This, of course, would wreak havoc, both in the TeX output and in the runtime system. See https://tug.org/pipermail/tex-live/2023-July/049306.htm for the initial bug report. git-svn-id: svn://tug.org/texlive/trunk@67656 c570f23f-e606-0410-a88d-b1316a301751
Diffstat (limited to 'Build/source/texk/web2c/ChangeLog')
-rw-r--r--Build/source/texk/web2c/ChangeLog4
1 files changed, 4 insertions, 0 deletions
diff --git a/Build/source/texk/web2c/ChangeLog b/Build/source/texk/web2c/ChangeLog
index 06a24f2a4d1..2cdc40a1a21 100644
--- a/Build/source/texk/web2c/ChangeLog
+++ b/Build/source/texk/web2c/ChangeLog
@@ -1,3 +1,7 @@
+2023-07-17 Andreas Scherer <https://ascherer.github.io>
+
+ * weave.ch: Deal with malign user input.
+
2023-07-09 Andreas Scherer <https://ascherer.github.io>
* cwebboot.cin: Regenerate boot source.