Don't dereference the pointers.  Catch by Thomas.

Modified: trunk/reactos/subsys/system/cmd/redir.c

--- trunk/reactos/subsys/system/cmd/redir.c	2005-08-25 22:06:31 UTC (rev 17547)
+++ trunk/reactos/subsys/system/cmd/redir.c	2005-08-25 22:09:10 UTC (rev 17548)
@@ -250,8 +250,8 @@

 	{
 		if (*sp == _T('^'))
 		{

-			*sp++;
-			*sp++;

+			sp++;
+			sp++;

 			continue;
 		}
 		else if ((*sp == _T('"')) || (*sp == _T('\'')))