Fix read beyond end of conditional argument on missing operand

[empserver] / src / lib / subs / nstr.c

diff --git a/src/lib/subs/nstr.c b/src/lib/subs/nstr.c
index d94567b61c6764b1e91b33cfcd100b113d08b48d..7ffb5712f3b87d5021b73faa0b3ffae374b03a20 100644 (file)
--- a/src/lib/subs/nstr.c
+++ b/src/lib/subs/nstr.c
@@ -77,6 +77,10 @@ nstr_comp(struct nscstr *np, int len, int type, char *str)
            np = &dummy;
 
        /* left operand */
+       if (!*cond) {
+           pr("%s -- %scondition expected\n", str, i ? "another " : "");
+           return -1;
+       }
        tail = nstr_parse_val(cond, &np->lft);
        lft_caidx = nstr_match_ca(&np->lft, ca);
 
@@ -92,6 +96,10 @@ nstr_comp(struct nscstr *np, int len, int type, char *str)
        ++tail;
 
        /* right operand */
+       if (!*tail) {
+           pr("%s -- operand expected\n", cond);
+           return -1;
+       }
        tail = nstr_parse_val(tail, &np->rgt);
        rgt_caidx = nstr_match_ca(&np->rgt, ca);
 
@@ -313,7 +321,7 @@ nstr_parse_val(char *str, struct valstr *val)
     }
 
     /* funny character, interpret as identifier */
-    tail = str+1;
+    tail = CANT_HAPPEN(!*str) ? str : str + 1;
     val->val_type = NSC_NOTYPE;
     val->val_cat = NSC_ID;
     val->val_as.str.base = str;