Skip to content

Commit 18dd4ee

Browse files
committed
Fix #13705 fuzzing crash (null-pointer-use) in getEnumType()
1 parent dd01ff1 commit 18dd4ee

2 files changed

Lines changed: 3 additions & 0 deletions

File tree

lib/tokenize.cpp

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -8944,6 +8944,8 @@ void Tokenizer::findGarbageCode() const
89448944
syntaxError(tok);
89458945
if (Token::Match(tok, "!|~ %comp%") &&
89468946
!(cpp && tok->strAt(1) == ">" && Token::simpleMatch(tok->tokAt(-1), "operator")))
8947+
syntaxError(tok);
8948+
if (Token::Match(tok, "%comp% {") && (!cpp || tok->str() != ">"))
89478949
syntaxError(tok);
89488950
if (Token::Match(tok, "] %name%") && (!cpp || !(tok->tokAt(1)->isKeyword() || (tok->tokAt(-1) && Token::simpleMatch(tok->tokAt(-2), "delete ["))))) {
89498951
if (tok->next()->isUpperCaseName())
Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1 @@
1+
{f F<{enum{E=1};}>}

0 commit comments

Comments
 (0)