fixed a number of crashes due to empty string arguments or uninitialized registers

* An empty but valid teco_string_t can contain NULL pointers.
  More precisely, a state's done_cb() can be invoked with such empty strings
  in case of empty string arguments.
  Also a registers get_string() can return the NULL pointer
  for existing registers with uninitialized string parts.
* In all of these cases, the language should treat "uninitialized" strings
  exactly like empty strings.
* Not doing so, resulted in a number of vulnerabilities.
  * EN$$ crashed if "_" was uninitialized
  * The ^E@q and ^ENq string building constructs would crash for existing but
    uninitialized registers q.
  * ?$ would crash
  * ESSETILEXER$$ would crash
* This is now fixed.
  Test cases have been added.
* I cannot guarantee that I have found all such cases.
  Generally, it might be wise to change our definitions and make sure that
  every teco_string_t must have an associated heap object to be valid.
  All functions returning pointer+length pairs should consequently also never
  return NULL pointers.

1 files changed, 1 insertions, 1 deletions

diff --git a/src/parser.c b/src/parser.c
index c25ed0d..575c066 100644
--- a/src/parser.c
+++ b/src/parser.c
@@ -657,7 +657,7 @@ teco_state_stringbuilding_ctle_quote_input(teco_machine_stringbuilding_t *ctx, g
 		                                table != &teco_qreg_table_globals);
 		return NULL;
 	}
-	g_autofree gchar *str_quoted = g_shell_quote(str.data);
+	g_autofree gchar *str_quoted = g_shell_quote(str.data ? : "");
 	teco_string_append(ctx->result, str_quoted, strlen(str_quoted));
 
 	return &teco_state_stringbuilding_start;