xz: Avoid arithmetic on a null pointer

It's undefined behavior. The result wasn't ever used as it occurred
in the last iteration of a loop.

Clang 17 with -fsanitize=address,undefined:

    $ src/xz/xz --block-list=123
    src/xz/args.c:164:12: runtime error: applying non-zero offset 1
        to null pointer

Fixes: 88ccf47205d7f3aa314d358c72ef214f10f68b43
Co-authored-by: Sam James <sam@gentoo.org>
(cherry picked from commit 77c8f60547decefca8f2d0c905d9c708c38ee8ff)

diff --git a/src/xz/args.c b/src/xz/args.c
index a94e0d9e54a1345b0e25c5c4e467b03416012a4d..d119fe5a66dce3a63a880f58f05997912a1bce9d 100644 (file)
--- a/src/xz/args.c
+++ b/src/xz/args.c
@@ -121,7 +121,13 @@ parse_block_list(const char *str_const)
                        }
                }
 
-               str = p + 1;
+               // Be standards compliant: p + 1 is undefined behavior
+               // if p == NULL. That occurs on the last iteration of
+               // the loop when we won't care about the value of str
+               // anymore anyway. That is, this is done conditionally
+               // solely for standard conformance reasons.
+               if (p != NULL)
+                       str = p + 1;
        }
 
        // Terminate the array.