[BACK]Return to chars.c CVS log [TXT][DIR] Up to [local] / src / usr.bin / mandoc

Diff for /src/usr.bin/mandoc/chars.c between version 1.28 and 1.29

version 1.28, 2014/04/20 16:44:44 version 1.29, 2014/07/23 15:00:00
Line 123 
Line 123 
   
         if ((i = mandoc_strntoi(p, sz, 16)) < 0)          if ((i = mandoc_strntoi(p, sz, 16)) < 0)
                 return('\0');                  return('\0');
         /* FIXME: make sure we're not in a bogus range. */  
           /*
            * Security warning:
            * Never extend the range of accepted characters
            * to overlap with the ASCII range, 0x00-0x7F
            * without re-auditing the callers of this function.
            * Some callers might relay on the fact that we never
            * return ASCII characters for their escaping decisions.
            *
            * XXX Code is missing here to exclude bogus ranges.
            */
   
         return(i > 0x80 && i <= 0x10FFFF ? i : '\0');          return(i > 0x80 && i <= 0x10FFFF ? i : '\0');
 }  }
   
Legend:
Removed from v.1.28  
changed lines
  Added in v.1.29