From 364dd0245977478c1f41352149753688c2a4cf86 Mon Sep 17 00:00:00 2001 From: Sergey Matveychuk Date: Mon, 22 Nov 2004 21:53:23 +0000 Subject: - Fix possible buffer overflow PR: ports/70699 Submitted by: Sergey S. Kostyliov --- devel/libedit/files/patch-history.c | 16 ++++++++++++++++ 1 file changed, 16 insertions(+) create mode 100644 devel/libedit/files/patch-history.c (limited to 'devel/libedit/files/patch-history.c') diff --git a/devel/libedit/files/patch-history.c b/devel/libedit/files/patch-history.c new file mode 100644 index 000000000000..a035eec96202 --- /dev/null +++ b/devel/libedit/files/patch-history.c @@ -0,0 +1,16 @@ +--- history.c.orig Tue Nov 23 01:41:41 2004 ++++ history.c Tue Nov 23 01:43:09 2004 +@@ -728,10 +728,10 @@ + for (i = 0, retval = HLAST(h, &ev); + retval != -1; + retval = HPREV(h, &ev), i++) { +- len = strlen(ev.str) * 4; +- if (len >= max_size) { ++ len = strlen(ev.str) * 4 + 1; ++ if (len > max_size) { + char *nptr; +- max_size = (len + 1023) & 1023; ++ max_size = (len + 1023) & ~1023; + nptr = h_realloc(ptr, max_size); + if (nptr == NULL) { + i = -1; -- cgit v1.2.3