Closed znakeeye closed 1 month ago
Thanks for the report. Fixed on main.
Thanks. Any plans for an official 1.1.9 release?
If you need one just for this I can do one. Let me know.
Yes please. Maintaining local patches is not great 🙂
The changes are upstream in v1.1.9. Thanks.
Please check
utility.c
. There you find several of these dangerous loops:It should be
*p
in all cases. E.g. Seelxw_name_to_row_2
where parsing "A1" would incrementp
like 1,000,000 times with some bad luck. Thus, we have a read overflow.Fix:
if (p)
withif (*p)
while (p
withwhile (*p