Security Advisories (1)
CVE-2019-20454 (2020-02-14)

An out-of-bounds read was discovered in PCRE before 10.34 when the pattern \X is JIT compiled and used to match specially crafted subjects in non-UTF mode. Applications that use PCRE to parse untrusted input may be vulnerable to this flaw, which would allow an attacker to crash the application. The flaw occurs in do_extuni_no_utf in pcre2_jit_compile.c.

Changes for version 2.0.30 - 2017-12-27

  • Jean-Damien Durand <jeandamiendurand@free.fr>
    • Version 2.0.30 - Case where a lexeme matches, and explicit terminal as well, and the lexeme match is longer than the terminal, then the lexeme is wrongly skipped
    • .appveyor.yml dev+ [ci skip]
    • testbin/WindowsTest.sh
    • Merge commit '2e025e00c9aa3b41844a3f21f13f864e24ba2bcd'
    • Squashed '3rdparty/github/cmake-utils/' changes from c219386d..372b25c6
    • Toolchain dev+ [ci skip]
    • toolchain dev+ [ci skip]

Modules

ESLIF is Extended ScanLess InterFace
ESLIF Event Types
MarpaX::ESLIF's grammar
ESLIF Grammar Properties
ESLIF Grammar Rule Properties
ESLIF Grammar Symbol Properties
ESLIF Logger levels
ESLIF Rule Property Bit Set
ESLIF Symbol Property Bit Set
ESLIF Symbol Type
ESLIF Value Types