d/freebsd-skq
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Fix off by one error that overflowed the rep_len array when doing

Browse Source 
the final NUL termination.

Reported by:	Coverity
CID:		1007617
MFC after:	1 week
This commit is contained in:
truckman 2016-05-16 19:48:02 +00:00
parent 4743a67b21
commit c577669dd3
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
usr.bin/chat/chat.c
View File

@ -521,7 +521,7 @@ void terminate(int status)
size_t rep_len;
rep_len = strlen(report_buffer);
while (rep_len + 1 <= sizeof(report_buffer)) {
while (rep_len + 1 < sizeof(report_buffer)) {
alarm(1);
c = get_char();
alarm(0);