search for: nextstateintable

Hi all, I have found what I think it is a bug in DFAPacketizer::ReadTable. When finding NextStateInTable to cache all transitions belonging to a state into CachedTable, ReadTable does not check bounds: unsigned ThisState = DFAStateEntryTable[state]; | unsigned NextStateInTable = DFAStateEntryTable[state+1]; which makes NextStateInTable get a random value when state == <last state in table>. Be...

...t; Qualcomm Innovation Center, Inc. is a member of Code Aurora Forum, hosted > by The Linux Foundation > > > > On 12/10/2012 4:48 AM, Carlos Sánchez de La Lama wrote: > > Hi all, > > I have found what I think it is a bug in DFAPacketizer::ReadTable. > > When finding NextStateInTable to cache all transitions belonging to a > state into CachedTable, ReadTable does not check bounds: > > unsigned ThisState = > DFAStateEntryTable[state]; > | > unsigned NextStateInTable = DFAStateEntryTable[state+1]; > > which makes NextStateInTable get a random value when s...

...open for this? -Anshu --- Qualcomm Innovation Center, Inc. is a member of Code Aurora Forum, hosted by The Linux Foundation On 12/10/2012 4:48 AM, Carlos Sánchez de La Lama wrote: > Hi all, > > I have found what I think it is a bug in DFAPacketizer::ReadTable. > > When finding NextStateInTable to cache all transitions belonging to a > state into CachedTable, ReadTable does not check bounds: > > unsigned ThisState = DFAStateEntryTable[state]; | > unsigned NextStateInTable = DFAStateEntryTable[state+1]; > > which makes NextStateInTable get a random value when state == &l...

...is a member of Code Aurora Forum, > hosted by The Linux Foundation > > > > On 12/10/2012 4:48 AM, Carlos Sánchez de La Lama wrote: >> Hi all, >> >> I have found what I think it is a bug in DFAPacketizer::ReadTable. >> >> When finding NextStateInTable to cache all transitions belonging >> to a state into CachedTable, ReadTable does not check bounds: >> >> unsigned ThisState = DFAStateEntryTable[state]; | >> unsigned NextStateInTable = DFAStateEntryTable[state+1]; >> >> which makes NextStateInTa...

...of Code Aurora Forum, >> hosted by The Linux Foundation >> >> >> >> On 12/10/2012 4:48 AM, Carlos Sánchez de La Lama wrote: >> >> Hi all, >> >> I have found what I think it is a bug in DFAPacketizer::ReadTable. >> >> When finding NextStateInTable to cache all transitions belonging to a >> state into CachedTable, ReadTable does not check bounds: >> >> unsigned ThisState = >> DFAStateEntryTable[state]; >> | >> unsigned NextStateInTable = DFAStateEntryTable[state+1]; >> >> which makes NextStat...

...The Linux Foundation >>> >>> >>> >>> On 12/10/2012 4:48 AM, Carlos Sánchez de La Lama wrote: >>> >>> Hi all, >>> >>> I have found what I think it is a bug in DFAPacketizer::ReadTable. >>> >>> When finding NextStateInTable to cache all transitions belonging to a >>> state into CachedTable, ReadTable does not check bounds: >>> >>> unsigned ThisState = >>> DFAStateEntryTable[state]; >>> | >>> unsigned NextStateInTable = DFAStateEntryTable[state+1]; >>> &g...