Unrated severityNVD Advisory· Published Oct 14, 2019· Updated Aug 5, 2024
CVE-2019-17544
CVE-2019-17544
Description
GNU Aspell before 0.60.8 contains a stack-based buffer over-read via an isolated backslash in the unescape() function.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
GNU Aspell before 0.60.8 contains a stack-based buffer over-read via an isolated backslash in the unescape() function.
Vulnerability
GNU Aspell versions before 0.60.8 have a stack-based buffer over-read vulnerability in the unescape function in common/getdata.cpp. The issue occurs when a backslash (\) is at the end of a string without an accompanying escape character, causing the code to read beyond the source buffer. The affected code is in the common/getdata.cpp file, as shown in commit [2] which adds a check if (*src == '\\' && src[1]) to prevent reading past the end of the string. Versions up to and including 0.60.7 are vulnerable.
Exploitation
An attacker needs to be able to supply a maliciously crafted word list or configuration file with an isolated backslash character. When Aspell processes this file, the unescape function is called, and the backslash triggers an out-of-bounds read. No authentication is required if the attacker can control the input to Aspell, for example by tricking a user into spell-checking a document that uses a custom dictionary with a trailing backslash.
Impact
A successful attack results in a stack-based buffer over-read, which could cause Aspell to crash or leak sensitive memory contents [1, 2]. The confidentiality impact is limited to information disclosure (CIA impact low for availability and integrity), potentially exposing stack data that an attacker could use for further exploitation.
Mitigation
The fix was released in Aspell version 0.60.8 [1]. Users should upgrade to version 0.60.8 or later, where the commit 80fa26c [2] includes the necessary check. If upgrading is not possible, avoid processing untrusted word lists or dictionary files containing isolated backslash characters. There is no known workaround for the vulnerability in older versions.
References
AI Insight generated on May 26, 2026. Synthesized from this CVE's description and the cited reference URLs; citations are validated against the source bundle.
Affected products
9- GNU/Aspelldescription
- osv-coords7 versionspkg:rpm/suse/aspell&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP4pkg:rpm/suse/aspell&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP4pkg:rpm/suse/aspell&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5pkg:rpm/suse/aspell&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP4pkg:rpm/suse/aspell&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP5pkg:rpm/suse/aspell&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP4pkg:rpm/suse/aspell&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP5
< 0.60.6.1-18.3.1+ 6 more
- (no CPE)range: < 0.60.6.1-18.3.1
- (no CPE)range: < 0.60.6.1-18.3.1
- (no CPE)range: < 0.60.6.1-18.3.1
- (no CPE)range: < 0.60.6.1-18.3.1
- (no CPE)range: < 0.60.6.1-18.3.1
- (no CPE)range: < 0.60.6.1-18.3.1
- (no CPE)range: < 0.60.6.1-18.3.1
Patches
237 files changed · +38 −38
configure.ac+1 −1 modified@@ -1,4 +1,4 @@ -AC_INIT(GNU Aspell, 0.60.8-git) +AC_INIT(GNU Aspell, 0.60.8) AC_CONFIG_SRCDIR(prog/aspell.cpp) AC_CANONICAL_SYSTEM AM_INIT_AUTOMAKE
po/aspell.pot+2 −2 modified@@ -6,9 +6,9 @@ #, fuzzy msgid "" msgstr "" -"Project-Id-Version: aspell 0.60.8-git\n" +"Project-Id-Version: aspell 0.60.8\n" "Report-Msgid-Bugs-To: kevina@gnu.org\n" -"POT-Creation-Date: 2019-10-06 21:45-0400\n" +"POT-Creation-Date: 2019-10-12 18:20-0400\n" "PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n" "Last-Translator: FULL NAME <EMAIL@ADDRESS>\n" "Language-Team: LANGUAGE <LL@li.org>\n"
po/ast.po+1 −1 modified@@ -6,7 +6,7 @@ msgid "" msgstr "" "Project-Id-Version: aspell 0.60.6\n" "Report-Msgid-Bugs-To: kevina@gnu.org\n" -"POT-Creation-Date: 2019-10-06 21:45-0400\n" +"POT-Creation-Date: 2019-10-12 18:20-0400\n" "PO-Revision-Date: 2010-02-28 22:09+0200\n" "Last-Translator: Marquinos <maacub@gmail.com>\n" "Language-Team: Asturian <ubuntu-l10n-ast@lists.ubuntu.com>\n"
po/be.po+1 −1 modified@@ -10,7 +10,7 @@ msgid "" msgstr "" "Project-Id-Version: aspell 0.51\n" "Report-Msgid-Bugs-To: kevina@gnu.org\n" -"POT-Creation-Date: 2019-10-06 21:45-0400\n" +"POT-Creation-Date: 2019-10-12 18:20-0400\n" "PO-Revision-Date: 2004-01-06 16:34+0200\n" "Last-Translator: Vital khilko <dojlid@mova.org>\n" "Language-Team: Belarusian <i18n@mova.org>\n"
po/ca.po+1 −1 modified@@ -7,7 +7,7 @@ msgid "" msgstr "" "Project-Id-Version: aspell 0.60.3\n" "Report-Msgid-Bugs-To: kevina@gnu.org\n" -"POT-Creation-Date: 2019-10-06 21:45-0400\n" +"POT-Creation-Date: 2019-10-12 18:20-0400\n" "PO-Revision-Date: 2006-07-03 19:40+0100\n" "Last-Translator: Joan Sala Soler <joansala@gmail.com>\n" "Language-Team: Catalan <ca@dodds.net>\n"
po/cs.po+1 −1 modified@@ -10,7 +10,7 @@ msgid "" msgstr "" "Project-Id-Version: aspell 0.60.7\n" "Report-Msgid-Bugs-To: kevina@gnu.org\n" -"POT-Creation-Date: 2019-10-06 21:45-0400\n" +"POT-Creation-Date: 2019-10-12 18:20-0400\n" "PO-Revision-Date: 2013-06-07 10:21+0200\n" "Last-Translator: Marek Černocký <marek@manet.cz>\n" "Language-Team: Czech <translation-team-cs@lists.sourceforge.net>\n"
po/da.po+1 −1 modified@@ -19,7 +19,7 @@ msgid "" msgstr "" "Project-Id-Version: aspell 0.60.7\n" "Report-Msgid-Bugs-To: kevina@gnu.org\n" -"POT-Creation-Date: 2019-10-06 21:45-0400\n" +"POT-Creation-Date: 2019-10-12 18:20-0400\n" "PO-Revision-Date: 2011-07-08 12:51+0200\n" "Last-Translator: Joe Hansen <joedalton2@yahoo.dk>\n" "Language-Team: Danish <dansk@dansk-gruppen.dk>\n"
po/de.po+1 −1 modified@@ -9,7 +9,7 @@ msgid "" msgstr "" "Project-Id-Version: aspell 0.60.8-pre2\n" "Report-Msgid-Bugs-To: kevina@gnu.org\n" -"POT-Creation-Date: 2019-10-06 21:45-0400\n" +"POT-Creation-Date: 2019-10-12 18:20-0400\n" "PO-Revision-Date: 2019-09-24 21:35+0200\n" "Last-Translator: Roland Illig <roland.illig@gmx.de>\n" "Language-Team: German <translation-team-de@lists.sourceforge.net>\n"
po/en_GB.po+1 −1 modified@@ -6,7 +6,7 @@ msgid "" msgstr "" "Project-Id-Version: aspell 0.60-pre1\n" "Report-Msgid-Bugs-To: kevina@gnu.org\n" -"POT-Creation-Date: 2019-10-06 21:45-0400\n" +"POT-Creation-Date: 2019-10-12 18:20-0400\n" "PO-Revision-Date: 2004-07-25 19:46-0400\n" "Last-Translator: Gareth Owen <gowen72@yahoo.com>\n" "Language-Team: English (British) <en_gb@li.org>\n"
po/eo.po+1 −1 modified@@ -7,7 +7,7 @@ msgid "" msgstr "" "Project-Id-Version: aspell 0.60.7\n" "Report-Msgid-Bugs-To: kevina@gnu.org\n" -"POT-Creation-Date: 2019-10-06 21:45-0400\n" +"POT-Creation-Date: 2019-10-12 18:20-0400\n" "PO-Revision-Date: 2013-02-01 09:35-0300\n" "Last-Translator: Felipe Castro <fefcas@gmail.com>\n" "Language-Team: Esperanto <translation-team-eo@lists.sourceforge.net>\n"
po/es.po+1 −1 modified@@ -10,7 +10,7 @@ msgid "" msgstr "" "Project-Id-Version: aspell 0.60.6\n" "Report-Msgid-Bugs-To: kevina@gnu.org\n" -"POT-Creation-Date: 2019-10-06 21:45-0400\n" +"POT-Creation-Date: 2019-10-12 18:20-0400\n" "PO-Revision-Date: 2009-04-24 18:04+0200\n" "Last-Translator: Francisco Molinero <paco@byasl.com>\n" "Language-Team: Spanish <es@li.org>\n"
po/fi.po+1 −1 modified@@ -8,7 +8,7 @@ msgid "" msgstr "" "Project-Id-Version: aspell 0.60.7\n" "Report-Msgid-Bugs-To: kevina@gnu.org\n" -"POT-Creation-Date: 2019-10-06 21:45-0400\n" +"POT-Creation-Date: 2019-10-12 18:20-0400\n" "PO-Revision-Date: 2011-07-11 11:21+0200\n" "Last-Translator: Jorma Karvonen <karvonen.jorma@gmail.com>\n" "Language-Team: Finnish <translation-team-fi@lists.sourceforge.net>\n"
po/fr.po+1 −1 modified@@ -12,7 +12,7 @@ msgid "" msgstr "" "Project-Id-Version: aspell 0.60.8-pre2\n" "Report-Msgid-Bugs-To: kevina@gnu.org\n" -"POT-Creation-Date: 2019-10-06 21:45-0400\n" +"POT-Creation-Date: 2019-10-12 18:20-0400\n" "PO-Revision-Date: 2019-09-28 10:55+0200\n" "Last-Translator: Thierry Thomas <thierry@pompo.net>\n" "Language-Team: French <traduc@traduc.org>\n"
po/fur.po+1 −1 modified@@ -7,7 +7,7 @@ msgid "" msgstr "" "Project-Id-Version: aspell 0.60.7\n" "Report-Msgid-Bugs-To: kevina@gnu.org\n" -"POT-Creation-Date: 2019-10-06 21:45-0400\n" +"POT-Creation-Date: 2019-10-12 18:20-0400\n" "PO-Revision-Date: 2019-09-17 09:59+0200\n" "Last-Translator: Fabio Tomat <f.t.public@gmail.com>\n" "Language-Team: Friulian <f.t.public@gmail.com>\n"
po/ga.po+1 −1 modified@@ -6,7 +6,7 @@ msgid "" msgstr "" "Project-Id-Version: aspell 0.60.7\n" "Report-Msgid-Bugs-To: kevina@gnu.org\n" -"POT-Creation-Date: 2019-10-06 21:45-0400\n" +"POT-Creation-Date: 2019-10-12 18:20-0400\n" "PO-Revision-Date: 2013-05-09 06:24-05:00\n" "Last-Translator: Kevin Patrick Scannell <kscanne@gmail.com>\n" "Language-Team: Irish <gaeilge-gnulinux@lists.sourceforge.net>\n"
po/hr.po+1 −1 modified@@ -8,7 +8,7 @@ msgid "" msgstr "" "Project-Id-Version: aspell 0.60.8-pre2\n" "Report-Msgid-Bugs-To: kevina@gnu.org\n" -"POT-Creation-Date: 2019-10-06 21:45-0400\n" +"POT-Creation-Date: 2019-10-12 18:20-0400\n" "PO-Revision-Date: 2019-09-24 17:03+0200\n" "Last-Translator: Božidar Putanec <bozidarp@yahoo.com>\n" "Language-Team: Croatian <lokalizacija@linux.hr>\n"
po/id.po+1 −1 modified@@ -7,7 +7,7 @@ msgid "" msgstr "" "Project-Id-Version: aspell 0.60.6\n" "Report-Msgid-Bugs-To: kevina@gnu.org\n" -"POT-Creation-Date: 2019-10-06 21:45-0400\n" +"POT-Creation-Date: 2019-10-12 18:20-0400\n" "PO-Revision-Date: 2008-11-11 10:15+0700\n" "Last-Translator: Arif E. Nugroho <arif_endro@yahoo.com>\n" "Language-Team: Indonesian <translation-team-id@lists.sourceforge.net>\n"
po/it.po+1 −1 modified@@ -8,7 +8,7 @@ msgid "" msgstr "" "Project-Id-Version: aspell 0.60.6\n" "Report-Msgid-Bugs-To: kevina@gnu.org\n" -"POT-Creation-Date: 2019-10-06 21:45-0400\n" +"POT-Creation-Date: 2019-10-12 18:20-0400\n" "PO-Revision-Date: 2008-05-01 21:36+0200\n" "Last-Translator: Cristian Rigamonti <cri@linux.it>\n" "Language-Team: Italian <tp@lists.linux.it>\n"
po/ja.po+1 −1 modified@@ -7,7 +7,7 @@ msgid "" msgstr "" "Project-Id-Version: aspell 0.60.8-pre1\n" "Report-Msgid-Bugs-To: kevina@gnu.org\n" -"POT-Creation-Date: 2019-10-06 21:45-0400\n" +"POT-Creation-Date: 2019-10-12 18:20-0400\n" "PO-Revision-Date: 2019-09-24 01:21+0900\n" "Last-Translator: Takeshi Hamasaki <hmatrjp@users.sourceforge.jp>\n" "Language-Team: Japanese <translation-team-ja@lists.sourceforge.net>\n"
po/mn.po+1 −1 modified@@ -7,7 +7,7 @@ msgid "" msgstr "" "Project-Id-Version: aspell 0.60-pre1\n" "Report-Msgid-Bugs-To: kevina@gnu.org\n" -"POT-Creation-Date: 2019-10-06 21:45-0400\n" +"POT-Creation-Date: 2019-10-12 18:20-0400\n" "PO-Revision-Date: 2004-07-24 11:18+0100\n" "Last-Translator: Sanlig Badral <badral@users.sourceforge.net>\n" "Language-Team: Mongolian <openmn-translation@lists.sourceforge.net>\n"
po/ms.po+1 −1 modified@@ -7,7 +7,7 @@ msgid "" msgstr "" "Project-Id-Version: aspell-0.60.6\n" "Report-Msgid-Bugs-To: kevina@gnu.org\n" -"POT-Creation-Date: 2019-10-06 21:45-0400\n" +"POT-Creation-Date: 2019-10-12 18:20-0400\n" "PO-Revision-Date: 2009-07-05 20:27+0800\n" "Last-Translator: Muhammad Najmi Ahmad Zabidi <najmi.zabidi@gmail.com>\n" "Language-Team: Malay <translation-team-ms@lists.sourceforge.net>\n"
po/nl.po+1 −1 modified@@ -8,7 +8,7 @@ msgid "" msgstr "" "Project-Id-Version: aspell-0.60.8-pre2\n" "Report-Msgid-Bugs-To: kevina@gnu.org\n" -"POT-Creation-Date: 2019-10-06 21:45-0400\n" +"POT-Creation-Date: 2019-10-12 18:20-0400\n" "PO-Revision-Date: 2019-09-25 11:28+0200\n" "Last-Translator: Benno Schulenberg <vertaling@coevern.nl>\n" "Language-Team: Dutch <vertaling@vrijschrift.org>\n"
po/pl.po+1 −1 modified@@ -7,7 +7,7 @@ msgid "" msgstr "" "Project-Id-Version: aspell 0.60.8-pre2\n" "Report-Msgid-Bugs-To: kevina@gnu.org\n" -"POT-Creation-Date: 2019-10-06 21:45-0400\n" +"POT-Creation-Date: 2019-10-12 18:20-0400\n" "PO-Revision-Date: 2019-09-24 16:55+0200\n" "Last-Translator: Jakub Bogusz <qboosh@pld-linux.org>\n" "Language-Team: Polish <translation-team-pl@lists.sourceforge.net>\n"
po/pt_BR.po+1 −1 modified@@ -8,7 +8,7 @@ msgid "" msgstr "" "Project-Id-Version: aspell 0.60.8-pre2\n" "Report-Msgid-Bugs-To: kevina@gnu.org\n" -"POT-Creation-Date: 2019-10-06 21:45-0400\n" +"POT-Creation-Date: 2019-10-12 18:20-0400\n" "PO-Revision-Date: 2019-09-24 12:23-0200\n" "Last-Translator: Rafael Fontenelle <rafaelff@gnome.org>\n" "Language-Team: Brazilian Portuguese <ldpbr-translation@lists.sourceforge.net>\n"
po/pt.po+1 −1 modified@@ -7,7 +7,7 @@ msgid "" msgstr "" "Project-Id-Version: aspell-0.60.8-pre2\n" "Report-Msgid-Bugs-To: kevina@gnu.org\n" -"POT-Creation-Date: 2019-10-06 21:45-0400\n" +"POT-Creation-Date: 2019-10-12 18:20-0400\n" "PO-Revision-Date: 2019-09-25 07:25+0100\n" "Last-Translator: Pedro Albuquerque <palbuquerque73@gmail.com>\n" "Language-Team: Portuguese <translation-team-pt@lists.sourceforge.net>\n"
po/ro.po+1 −1 modified@@ -10,7 +10,7 @@ msgid "" msgstr "" "Project-Id-Version: aspell 0.60.8-pre2\n" "Report-Msgid-Bugs-To: kevina@gnu.org\n" -"POT-Creation-Date: 2019-10-06 21:45-0400\n" +"POT-Creation-Date: 2019-10-12 18:20-0400\n" "PO-Revision-Date: 2019-09-25 20:54+0200\n" "Last-Translator: Daniel Șerbănescu <daniel@serbanescu.dk>\n" "Language-Team: Romanian <translation-team-ro@lists.sourceforge.net>\n"
po/ru.po+1 −1 modified@@ -9,7 +9,7 @@ msgid "" msgstr "" "Project-Id-Version: aspell-0.60.8-pre2\n" "Report-Msgid-Bugs-To: kevina@gnu.org\n" -"POT-Creation-Date: 2019-10-06 21:45-0400\n" +"POT-Creation-Date: 2019-10-12 18:20-0400\n" "PO-Revision-Date: 2019-09-24 18:53+0300\n" "Last-Translator: Yuri Kozlov <yuray@komyakino.ru>\n" "Language-Team: Russian <gnu@d07.ru>\n"
po/rw.po+1 −1 modified@@ -16,7 +16,7 @@ msgid "" msgstr "" "Project-Id-Version: aspell 0.60\n" "Report-Msgid-Bugs-To: kevina@gnu.org\n" -"POT-Creation-Date: 2019-10-06 21:45-0400\n" +"POT-Creation-Date: 2019-10-12 18:20-0400\n" "PO-Revision-Date: 2005-04-04 10:55-0700\n" "Last-Translator: Steven Michael Murphy <murf@e-tools.com>\n" "Language-Team: Kinyarwanda <translation-team-rw@lists.sourceforge.net>\n"
po/sk.po+1 −1 modified@@ -6,7 +6,7 @@ msgid "" msgstr "" "Project-Id-Version: aspell 0.60.7\n" "Report-Msgid-Bugs-To: kevina@gnu.org\n" -"POT-Creation-Date: 2019-10-06 21:45-0400\n" +"POT-Creation-Date: 2019-10-12 18:20-0400\n" "PO-Revision-Date: 2011-07-08 20:53+0100\n" "Last-Translator: Ivan Masár <helix84@centrum.sk>\n" "Language-Team: Slovak <sk-i18n@lists.linux.sk>\n"
po/sl.po+1 −1 modified@@ -7,7 +7,7 @@ msgid "" msgstr "" "Project-Id-Version: aspell 0.60.8-pre2\n" "Report-Msgid-Bugs-To: kevina@gnu.org\n" -"POT-Creation-Date: 2019-10-06 21:45-0400\n" +"POT-Creation-Date: 2019-10-12 18:20-0400\n" "PO-Revision-Date: 2019-09-24 17:15+0200\n" "Last-Translator: Martin Srebotnjak <miles@filmsi.net>\n" "Language-Team: Slovenian <translation-team-sl@lists.sourceforge.net>\n"
po/sr.po+1 −1 modified@@ -7,7 +7,7 @@ msgid "" msgstr "" "Project-Id-Version: aspell-0.60.7\n" "Report-Msgid-Bugs-To: kevina@gnu.org\n" -"POT-Creation-Date: 2019-10-06 21:45-0400\n" +"POT-Creation-Date: 2019-10-12 18:20-0400\n" "PO-Revision-Date: 2011-12-09 22:30+0200\n" "Last-Translator: Мирослав Николић <miroslavnikolic@rocketmail.com>\n" "Language-Team: Serbian <gnu@prevod.org>\n"
po/sv.po+1 −1 modified@@ -8,7 +8,7 @@ msgid "" msgstr "" "Project-Id-Version: aspell 0.60.7\n" "Report-Msgid-Bugs-To: kevina@gnu.org\n" -"POT-Creation-Date: 2019-10-06 21:45-0400\n" +"POT-Creation-Date: 2019-10-12 18:20-0400\n" "PO-Revision-Date: 2016-05-04 16:39+0200\n" "Last-Translator: Josef Andersson <josef.andersson@fripost.org>\n" "Language-Team: Swedish <tp-sv@listor.tp-sv.se>\n"
po/tg.po+1 −1 modified@@ -17,7 +17,7 @@ msgid "" msgstr "" "Project-Id-Version: aspell\n" "Report-Msgid-Bugs-To: kevina@gnu.org\n" -"POT-Creation-Date: 2019-10-06 21:45-0400\n" +"POT-Creation-Date: 2019-10-12 18:20-0400\n" "PO-Revision-Date: 2004-05-22 19:33+0000\n" "Last-Translator: Marina Kolucheva <youth_opportunities@tajik.net>\n" "Language-Team: Tajik\n"
po/uk.po+1 −1 modified@@ -9,7 +9,7 @@ msgid "" msgstr "" "Project-Id-Version: aspell 0.60.8-pre2\n" "Report-Msgid-Bugs-To: kevina@gnu.org\n" -"POT-Creation-Date: 2019-10-06 21:45-0400\n" +"POT-Creation-Date: 2019-10-12 18:20-0400\n" "PO-Revision-Date: 2019-09-24 18:59+0300\n" "Last-Translator: Yuri Chornoivan <yurchor@ukr.net>\n" "Language-Team: Ukrainian <trans-uk@lists.fedoraproject.org>\n"
po/vi.po+1 −1 modified@@ -9,7 +9,7 @@ msgid "" msgstr "" "Project-Id-Version: aspell 0.60.7\n" "Report-Msgid-Bugs-To: kevina@gnu.org\n" -"POT-Creation-Date: 2019-10-06 21:45-0400\n" +"POT-Creation-Date: 2019-10-12 18:20-0400\n" "PO-Revision-Date: 2012-03-13 14:59+0700\n" "Last-Translator: Trần Ngọc Quân <vnwildman@gmail.com>\n" "Language-Team: Vietnamese <vi-VN@googlegroups.com>\n"
po/wa.po+1 −1 modified@@ -6,7 +6,7 @@ msgid "" msgstr "" "Project-Id-Version: aspell 0.60.2-b20041203\n" "Report-Msgid-Bugs-To: kevina@gnu.org\n" -"POT-Creation-Date: 2019-10-06 21:45-0400\n" +"POT-Creation-Date: 2019-10-12 18:20-0400\n" "PO-Revision-Date: 2004-12-06 17:51+0100\n" "Last-Translator: Pablo Saratxaga <pablo@walon.org>\n" "Language-Team: Walloon <linux-wa@walon.org>\n"
po/zh_CN.po+1 −1 modified@@ -9,7 +9,7 @@ msgid "" msgstr "" "Project-Id-Version: aspell-0.60.8-pre2\n" "Report-Msgid-Bugs-To: kevina@gnu.org\n" -"POT-Creation-Date: 2019-10-06 21:45-0400\n" +"POT-Creation-Date: 2019-10-12 18:20-0400\n" "PO-Revision-Date: 2019-09-24 10:51-0400\n" "Last-Translator: Boyuan Yang <073plan@gmail.com>\n" "Language-Team: Chinese (simplified) <i18n-zh@googlegroups.com>\n"
80fa26c74279Fix various bugs found by OSS-Fuze.
3 files changed · +3 −2
common/config.cpp+1 −1 modified@@ -763,7 +763,7 @@ namespace acommon { } res.append(':'); } - if (res.back() == ':') res.pop_back(); + if (!res.empty() && res.back() == ':') res.pop_back(); } struct ListAddHelper : public AddableContainer
common/file_util.cpp+1 −0 modified@@ -181,6 +181,7 @@ namespace acommon { while ( (dir = els.next()) != 0 ) { path = dir; + if (path.empty()) continue; if (path.back() != '/') path += '/'; unsigned dir_len = path.size(); path += filename;
common/getdata.cpp+1 −1 modified@@ -64,7 +64,7 @@ namespace acommon { char * unescape(char * dest, const char * src) { while (*src) { - if (*src == '\\') { + if (*src == '\\' && src[1]) { ++src; switch (*src) { case 'n': *dest = '\n'; break;
Vulnerability mechanics
Generated on May 9, 2026. Inputs: CWE entries + fix-commit diffs from this CVE's patches. Citations validated against bundle.
References
8- usn.ubuntu.com/4155-1/mitrevendor-advisoryx_refsource_UBUNTU
- usn.ubuntu.com/4155-2/mitrevendor-advisoryx_refsource_UBUNTU
- www.debian.org/security/2021/dsa-4948mitrevendor-advisoryx_refsource_DEBIAN
- bugs.chromium.org/p/oss-fuzz/issues/detailmitrex_refsource_MISC
- github.com/GNUAspell/aspell/commit/80fa26c74279fced8d778351cff19d1d8f44fe4emitrex_refsource_MISC
- github.com/GNUAspell/aspell/compare/rel-0.60.7...rel-0.60.8mitrex_refsource_MISC
- lists.debian.org/debian-lts-announce/2019/10/msg00027.htmlmitremailing-listx_refsource_MLIST
- lists.debian.org/debian-lts-announce/2021/07/msg00021.htmlmitremailing-listx_refsource_MLIST
News mentions
0No linked articles in our index yet.