Skip to content

[flang] [flang-rt] Subscript overrun could occur in namelists during a READ command. #176959

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
klausler merged 4 commits into from
Mar 18, 2026
+3 −1
Merged

[flang] [flang-rt] Subscript overrun could occur in namelists during a READ command. #176959

Changes from all commits
Commits
Show all changes
4 commits
Select commit Hold shift + click to select a range
a3eab98
Subscript overrun could occur in namelists during a READ command.
Jan 9, 2026
e927a30
Merge branch 'llvm:main' into Bug_Subscript-Overrun
kwyatt-ext Mar 2, 2026
eea96ea
Delete flang-rt/test/Runtime/bad_subscript_overrun01.f90
kwyatt-ext Mar 3, 2026
bebdc6d
Changed variable name/initialization to match flang coding standard.
Mar 18, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
4 changes: 3 additions & 1 deletion flang-rt/lib/runtime/namelist.cpp
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -170,7 +170,9 @@ static RT_API_ATTRS bool HandleSubscripts(IoStatementState &io,
std::size_t byteCount{0};
common::optional<char32_t> ch{io.GetNextNonBlank(byteCount)};
char32_t comma{GetComma(io)};
for (; ch && *ch != ')'; ++j) {

// Read subscripts, but don't exceed rank to prevent buffer overrun.
for (int rank{source.rank()}; ch && *ch != ')' && j <= rank; ++j) {
SubscriptValue dimLower{0}, dimUpper{0}, dimStride{0};
if (j < maxRank && j < source.rank()) {
const Dimension &dim{source.GetDimension(j)};
Expand Down
Loading