Fix an off-by-one buffer overflow in ngets().

Submitted by: Bruce Can MFC after: 1 month
2009-03-31 14:30:46 +00:00 · 2009-03-31 14:30:46 +00:00 · 6368eeb9b5
commit 6368eeb9b5
parent 4e28805a1b
1 changed files with 1 additions and 1 deletions
--- a/lib/libstand/gets.c
+++ b/lib/libstand/gets.c
@ -74,7 +74,7 @@ ngets(char *buf, int n)
 	    putchar('\n');
 	    break;
 	default:
-	    if ((n < 1) || ((lp - buf) < n)) {
+	    if ((n < 1) || ((lp - buf) < n - 1)) {
 		*lp++ = c;
 		putchar(c);
 	    }