commit 360e839535aa019a0a232112684852ed2026c465
author Marshall Clow <mclow.lists@gmail.com> Mon Aug 24 15:57:09 2015 +0000
committer Marshall Clow <mclow.lists@gmail.com> Mon Aug 24 15:57:09 2015 +0000
tree a3c508f148b85492972b7101ce4e8e09841edfb9
parent ae3ab8473d29f88b063ef8aa4e1e087172082893

Fix a crasher found by libFuzzer

llvm-svn: 245849
Cr-Mirrored-From: sso://chromium.googlesource.com/_direct/external/github.com/llvm/llvm-project
Cr-Mirrored-Commit: 550dfe79ca8c3a2ec5fbf2e34ad40fe66eb7c09f

include/regex

diff --git a/include/regex b/include/regex
index b355bbb..b2b556e 100644
--- a/include/regex
+++ b/include/regex
@@ -1733,6 +1733,8 @@
 void
 __back_ref<_CharT>::__exec(__state& __s) const
 {
+    if (__mexp_ > __s.__sub_matches_.size())
+        __throw_regex_error<regex_constants::error_backref>();
     sub_match<const _CharT*>& __sm = __s.__sub_matches_[__mexp_-1];
     if (__sm.matched)
     {