Avoid possible out of range index in MatchSpec::parse() (#3849)

opoplawski · web-flow · commit bd591115a1ac · 2025-03-17T15:37:04.000+01:00
diff --git a/libmamba/src/specs/match_spec.cpp b/libmamba/src/specs/match_spec.cpp
@@ -505,7 +505,7 @@ namespace mamba::specs
     auto MatchSpec::parse(std::string_view str) -> expected_parse_t<MatchSpec>
     {
         // Remove comments, i.e. everything after ` #` (space included)
-        if (const auto idx = str.find('#'); idx != std::string::npos && str[idx - 1] == ' ')
+        if (const auto idx = str.find(" #"); idx != std::string::npos)
         {
             str = str.substr(0, idx);
         }

Original file line number	Diff line number	Diff line change
`@@ -505,7 +505,7 @@ namespace mamba::specs`
`505`	`505`	`auto MatchSpec::parse(std::string_view str) -> expected_parse_t<MatchSpec>`
`506`	`506`	`{`
`507`	`507`	// Remove comments, i.e. everything after ` #` (space included)
`508`		`- if (const auto idx = str.find('#'); idx != std::string::npos && str[idx - 1] == ' ')`
	`508`	`+ if (const auto idx = str.find(" #"); idx != std::string::npos)`
`509`	`509`	`{`
`510`	`510`	`str = str.substr(0, idx);`
`511`	`511`	`}`