diff options
author | Andreas Scherer <andreas_tex@freenet.de> | 2023-07-17 15:15:21 +0000 |
---|---|---|
committer | Andreas Scherer <andreas_tex@freenet.de> | 2023-07-17 15:15:21 +0000 |
commit | 9d29307dcb777eb5399b047b75e6e454234fa5e4 (patch) | |
tree | 872192aedf2324fdfef3a8b68128aafd78593c19 /Build/source/texk/web2c/ChangeLog | |
parent | 0f0235553c87bac50fae9bfabd6aa81c619a29ae (diff) |
[C/WEB] Deal with malign user input.
'break_out' and 'flush_buffer' were tricked into putting an extremely
long TeX macro (longer than 'line_length', i.e., 80 chars) into
'out_buf', which overflowed. This, of course, would wreak havoc, both in
the TeX output and in the runtime system.
See https://tug.org/pipermail/tex-live/2023-July/049306.htm for the
initial bug report.
git-svn-id: svn://tug.org/texlive/trunk@67656 c570f23f-e606-0410-a88d-b1316a301751
Diffstat (limited to 'Build/source/texk/web2c/ChangeLog')
-rw-r--r-- | Build/source/texk/web2c/ChangeLog | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/Build/source/texk/web2c/ChangeLog b/Build/source/texk/web2c/ChangeLog index 06a24f2a4d1..2cdc40a1a21 100644 --- a/Build/source/texk/web2c/ChangeLog +++ b/Build/source/texk/web2c/ChangeLog @@ -1,3 +1,7 @@ +2023-07-17 Andreas Scherer <https://ascherer.github.io> + + * weave.ch: Deal with malign user input. + 2023-07-09 Andreas Scherer <https://ascherer.github.io> * cwebboot.cin: Regenerate boot source. |