bugs in regex_process() in less applet

Mike Frysinger vapier at gentoo.org
Sun Apr 16 21:10:32 UTC 2006


i'm investigating a segfault reported by a Gentoo user in the less applet:
echo | busybox less
then just hit '/' and watch it crash

the crash happens in regex_process() as the fgets(uncomp_regx) returns 
immediatly without actually geting any input from the user

looks to me like there's a memleak with the pattern variable as it never gets 
freed ... and really, why are allocating this dynamically ?  what's wrong 
with the stack ?
-mike



More information about the busybox mailing list