Patch from Felipe Kellermann, "There is a call to printf using `*pr-cchar'

referencing a string and using a single char, when *p <= 0x1f."

diff --git a/libbb/dump.c b/libbb/dump.c
index 30f69830bac149ca8d34973fdc07de59a22d9fe2..98f004ff6acce0643d560c70031ee31bd1d374dd 100644 (file)
--- a/libbb/dump.c
+++ b/libbb/dump.c
@@ -499,7 +499,7 @@ static void conv_u(PR * pr, u_char * p)
        /* od used nl, not lf */
        if (*p <= 0x1f) {
                *pr->cchar = 's';
-               printf(pr->fmt, list[4 * (int)(*p)]);
+               printf(pr->fmt, list + (4 * (int)*p));
        } else if (*p == 0x7f) {
                *pr->cchar = 's';
                printf(pr->fmt, "del");