mirrors/ladybird
0
0
Fork 0
mirror of https://github.com/LadybirdBrowser/ladybird.git synced 2025-09-10 19:46:03 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 9

LibGLSL: Avoid UAF when creating a preprocessor instance

Browse source 
The intialization of Definition::value allocates a string that we were
holding a view into. Store the result as a String to keep it alive; its
only usage is passing it to GenericLexer in another function.
This commit is contained in:
Timothy Flynn 2024-04-03 21:46:39 -04:00 • committed by Andreas Kling
commit decc00dcdf
Notes: sideshowbarker 2024-07-16 23:34:44 +09:00
2 changed files with 2 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

2
Userland/Libraries/LibGLSL/Preprocessor.cpp
View file

@ -366,7 +366,7 @@ ErrorOr<Optional<Preprocessor::Definition>> Preprocessor::create_definition(Stri
} }
if (token_index < tokens.size()) if (token_index < tokens.size())
definition.value = TRY(remove_escaped_newlines(line.substring_view(tokens[token_index].start().column))).bytes_as_string_view(); definition.value = TRY(remove_escaped_newlines(line.substring_view(tokens[token_index].start().column)));
return definition; return definition;
} }

2
Userland/Libraries/LibGLSL/Preprocessor.h
View file

@ -28,7 +28,7 @@ public:
struct Definition { struct Definition {
StringView key; StringView key;
Vector<StringView> parameters; Vector<StringView> parameters;
StringView value; String value;
FlyString filename; FlyString filename;
size_t line { 0 }; size_t line { 0 };
size_t column { 0 }; size_t column { 0 };