From: Ulrich Drepper <drepper@redhat.com>
Date: Thu, 13 Nov 2003 17:25:46 +0000 (+0000)
Subject: (parse_dup_op): Fail with REG_BADBR is first number in {,} expression is larger.
X-Git-Tag: cvs/glibc-2_3_3~58
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=deeb4aae693e746cec733826c2b90d9214a27dd9;p=thirdparty%2Fglibc.git

(parse_dup_op): Fail with REG_BADBR is first number in {,} expression is larger.
---

diff --git a/posix/regcomp.c b/posix/regcomp.c
index 9a48aa3f3b7..0dee2e62fc3 100644
--- a/posix/regcomp.c
+++ b/posix/regcomp.c
@@ -2412,6 +2412,12 @@ parse_dup_op (dup_elem, regexp, dfa, token, syntax, err)
 		goto parse_dup_op_espace;
 	    }
 	}
+      else if (BE (start > end, 0))
+	{
+	  /* First  number greater than first.  */
+	  *err = REG_BADBR;
+	  return NULL;
+	}
       else if (end - start > 0)
 	{
 	  /* Then extract "<re>{0,m}" to "<re>?<re>?...<re>?".  */