Browse Source
Fix another out-of-bounds read in SSML parsing.
A malformed tag like <foo could cause espeak to read past the end of the string.master
Christopher Brannon
4 years ago
3 changed files with 5 additions and 1 deletions
+ 3
- 1
src/libespeak-ng/readclause.c
View File
| return terminator; | return terminator; | ||||
| } | } | ||||
| c1 = ' '; | c1 = ' '; | ||||
| c2 = GetC(); | |||||
| if (!Eof()) { | |||||
| c2 = GetC(); | |||||
| } | |||||
| continue; | continue; | ||||
| } | } | ||||
| } | } |
+ 1
- 0
tests/ssml/malformed-tag1.expected
View File
+ 1
- 0
tests/ssml/malformed-tag1.ssml
View File
| <<foo |
Loading…