OpenBSD finds 33 year old bug in yacc(1)

From: Ulrich Spoerlein <uspoerlein_at_gmail.com>
Date: Tue, 8 Jul 2008 21:45:18 +0200
Hi,

I may have used yacc(1) once, but am in no position to analyze our yacc
wrt. the bug found here[1]

I grepped the offending pattern, though and it matches right here:

% grep -A1 -r 'yym.*=.*yylen' /usr/src/usr.bin/yacc
/usr/src/usr.bin/yacc/skeleton.c:    "    yym = yylen[yyn];",
/usr/src/usr.bin/yacc/skeleton.c-    "    yyval = yyvsp[1-yym];",
--
/usr/src/usr.bin/yacc/test/error.tab.c:    yym = yylen[yyn];
/usr/src/usr.bin/yacc/test/error.tab.c-    yyval = yyvsp[1-yym];
--
/usr/src/usr.bin/yacc/test/ftp.tab.c:    yym = yylen[yyn];
/usr/src/usr.bin/yacc/test/ftp.tab.c-    yyval = yyvsp[1-yym];

I didn't find any recent commits to these files, so perhaps the bug is
still there?

[1] http://undeadly.org/cgi?action=article&sid=20080708155228

Cheers,
Ulrich Spoerlein
-- 
It is better to remain silent and be thought a fool,
than to speak, and remove all doubt.
Received on Tue Jul 08 2008 - 17:45:32 UTC

This archive was generated by hypermail 2.4.0 : Wed May 19 2021 - 11:39:32 UTC