CRITICAL: buffer overflows in regexp search

[dandv 0]

1. In an Editor, type 'a', followed by 248 'x's, then 'b'. The 'b'

will be on column 250.

2. Search, with Regular Expressions enabled, for

a.*b

NDN will find the text.

3. Add an x among the x-es. 'b' will be on column 251.

4. Search again for a.*b . NDN will delete the entire string!

5. To solve the mystery, add another 'x' and search again. NDN will say

"1 replaces made" (but you just Searched (F7)).

6. Add at least another 'x', search again and watch NDN crash.

 

Hope this helps,

Dan Dascalescu