From b0d8ed7ad345e013cf6b4047e1e416a05f1582c2 Mon Sep 17 00:00:00 2001 From: John Baldwin Date: Tue, 31 Mar 2009 14:30:46 +0000 Subject: [PATCH] Fix an off-by-one buffer overflow in ngets(). Submitted by: Bruce Can MFC after: 1 month --- lib/libstand/gets.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/lib/libstand/gets.c b/lib/libstand/gets.c index 575134c30a09..7d54b0001775 100644 --- a/lib/libstand/gets.c +++ b/lib/libstand/gets.c @@ -74,7 +74,7 @@ ngets(char *buf, int n) putchar('\n'); break; default: - if ((n < 1) || ((lp - buf) < n)) { + if ((n < 1) || ((lp - buf) < n - 1)) { *lp++ = c; putchar(c); }