Path: utzoo!utgpu!news-server.csri.toronto.edu!cs.utexas.edu!wuarchive!zaphod.mps.ohio-state.edu!swrinde!elroy.jpl.nasa.gov!decwrl!deccrl!bloom-beacon!eru!hagbard!sunic!mcsun!hp4nl!mhres!squirrel!pronto!jv
From: jv@mh.nl (Johan Vromans)
Newsgroups: comp.lang.perl
Subject: TAINT and null args
Message-ID: <1991Apr15.105259.14517@pronto.mh.nl>
Date: 15 Apr 91 10:52:59 GMT
Sender: jv@pronto.mh.nl (Johan Vromans)
Reply-To: Johan Vromans <jv@mh.nl>
Distribution: comp
Organization: Multihouse Automation, the Netherlands
Lines: 19

In str.c, routine str_scat may cause a coredump in taintperl if a
null argument is passed.

 | str_scat(dstr,sstr)
 | STR *dstr;
 | register STR *sstr;
 | {
 | #ifdef TAINT
 |     tainted |= sstr->str_tainted;	<<< crash if sstr == NULL
 | #endif
 |     if (!sstr)
 | 	return;

	Johan
-- 
Johan Vromans				       jv@mh.nl via internet backbones
Multihouse Automatisering bv		       uucp: ..!{uunet,hp4nl}!mh.nl!jv
Doesburgweg 7, 2803 PL Gouda, The Netherlands  phone/fax: +31 1820 62911/62500
------------------------ "Arms are made for hugging" -------------------------