ITS#10430 - do not advance past NUL in get_token()

Removed pointer increment in get_token() when handling the '\0' case, preventing out-of-bounds reads.
This commit is contained in:
Dwij Mehta 2026-02-04 23:55:41 +00:00 committed by Quanah Gibson-Mount
parent 304345e606
commit afda4781cb

View file

@ -1018,7 +1018,6 @@ get_token( const char ** sp, char ** token_val )
switch (**sp) {
case '\0':
kind = TK_EOS;
(*sp)++;
break;
case '(':
kind = TK_LEFTPAREN;