Don't skip past zero byte in profile parsing

In parse_quoted_string(), only process an escape sequence if there is
a second character after the backlash, to avoid reading past the
terminating zero byte.  Reported by Lutz Justen.

ticket: 8825 (new)
tags: pullup
target_version: 1.17-next
target_version: 1.16-next

diff --git a/src/util/profile/prof_parse.c b/src/util/profile/prof_parse.c
index 531e4a099065e4228cb05612fc08bf096e788218..7ba44aca6eeeb71f445c261800ba178921750800 100644 (file)
--- a/src/util/profile/prof_parse.c
+++ b/src/util/profile/prof_parse.c
@@ -48,7 +48,7 @@ static void parse_quoted_string(char *str)
     char *to, *from;
 
     for (to = from = str; *from && *from != '"'; to++, from++) {
-        if (*from == '\\') {
+        if (*from == '\\' && *(from + 1) != '\0') {
             from++;
             switch (*from) {
             case 'n':