regcomp.c: Prevent integer overflow from nested regex quantifiers. 31/294531/2 accepted/tizen_6.0_base accepted/tizen_6.0_base_tool tizen_6.0_base accepted/tizen/6.0/base/20230713.143003 accepted/tizen/6.0/base/tool/20230625.221409 submit/tizen_6.0_base/20230622.055526
authorJohn Lightsey <jd@cpanel.net>
Thu, 21 Nov 2019 02:02:45 +0000 (20:02 -0600)
committerJinWang An <jinwang.an@samsung.com>
Wed, 21 Jun 2023 06:36:58 +0000 (06:36 +0000)
commitc10fa51f9dfdd3b1228cba243e1985b262e9c911
treea00a172e1cdab4b13dacea4c4ce11d272492283a
parenta135c716e985727dd4f676ebaa669a9e99354c63
regcomp.c: Prevent integer overflow from nested regex quantifiers.

(CVE-2020-10543) On 32bit systems the size calculations for nested regular
expression quantifiers could overflow causing heap memory corruption.

Fixes: Perl/perl5-security#125
(cherry picked from commit bfd31397db5dc1a5c5d3e0a1f753a4f89a736e71)
Signed-off-by: JinWang An <jinwang.an@samsung.com>
Change-Id: I17fef72a759729c0824181fabc324a23e7056ae6
regcomp.c