Clifford Yapp a4b309e8f0 Added hardening fixes from the various *BSD upstreams
Checked current OpenBSD (https://github.com/openbsd/src/blob/master/lib/libc/regex/regcomp.c) and FreeBSD
(https://github.com/freebsd/freebsd-src/blob/main/lib/libc/regex/regcomp.c) implementations.

- Newer version of overflow-safe allocation and protection fix for CVE-2015-2305
  (https://nvd.nist.gov/vuln/detail/cve-2015-2305).
- 128 MiB compilation-memory and parser-recursion limits.
- Fixes for malformed repetitions, embedded-NUL collating elements, alternation
  offsets, state-bit undefined behavior, signed high-byte handling, invalid
  arguments, and allocation cleanup.
- Additional REG_PEND out-of-bounds read found during fuzzing.
2026-09-09 15:16:48 -04:00
S
Description
DEPENDENCY: the Henry Spencer regex library
https://brlcad.org/
69 KiB
Languages
C 95.9%
CMake 4.1%