[Bug-readline] Critical issues of NULL-Dereference in readline-6.2/search.c and readline-6.2/histexpand.c

[Pankaj Sharma]

Hi,
The following critical bugs have been identified as NULL-DEREFERENCE on below as:

1.Readline-6.2-release

2.Linux (Red Hat) 

3.Description of the bug:

  There are possibilities to return 0 (null) by  

  current_history () to the HIST_ENTRY * variables 

  and they don't have NULL check before going to

  dereference these variables which may lead to

  crash.   
I).
File    : readline-6.2/search.c
Function: rl_history_search_internal ()
Issue   : temp = current_history (); may return 0.

II).
File    : readline-6.2/search.c
Function: noninc_dosearch ()
Issue   : entry = current_history (); may return 0.

III).
File    : readline-6.2/histexpand.c
Function: get_history_event ()
Issue   : entry = current_history (); may return 0.

 

4.Fixes For Bugs:

    Here ,the respective patch has been attached.

Please find it and give your valuable concern.

--

Thanks & Regards

-------------------

Pankaj Sharma

Contact at  : 8826958890

E-mail          : address@hidden       

readline-6.2_Null_dereference.patch
Description: Binary data