lib/server/cf_parse: OOB read in cf_pair_unescape() on trailing backslash

diff --git a/src/lib/server/cf_parse.c b/src/lib/server/cf_parse.c
index 7379bafaa30aceb913c177a186da0764c7d5e458..7ccdc0f3e6897308482f43af1e27e78d89c4e3ca 100644 (file)
--- a/src/lib/server/cf_parse.c
+++ b/src/lib/server/cf_parse.c
@@ -447,6 +447,10 @@ static int cf_pair_unescape(CONF_PAIR *cp, conf_parser_t const *rule)
                }
 
                p++;
+               if (*p == '\0') {
+                       *q++ = '\\';
+                       continue;
+               }
                switch (*p) {
                case 'r':
                        *q++ = '\r';