CVE-2023-37328 安全更新:-plugins-base1.0版本存在安全漏洞,攻击者利用该漏洞可以执行任意代码

This commit is contained in:
antonsma 2023-12-27 19:58:56 +08:00
parent 6f3499667a
commit 71d80c738b
1 changed files with 3 additions and 1 deletions

View File

@ -814,7 +814,7 @@ subrip_fix_up_markup (gchar ** p_txt, gconstpointer allowed_tags_ptr)
}
if (*next_tag == '<' && *(next_tag + 1) == '/') {
end_tag = strchr (cur, '>');
end_tag = strchr (next_tag, '>');
if (end_tag) {
const gchar *last = NULL;
if (num_open_tags > 0)
@ -827,6 +827,8 @@ subrip_fix_up_markup (gchar ** p_txt, gconstpointer allowed_tags_ptr)
} else {
--num_open_tags;
g_ptr_array_remove_index (open_tags, num_open_tags);
cur = end_tag + 1;
continue;
}
}
}