summaryrefslogtreecommitdiffstats
path: root/README
diff options
context:
space:
mode:
authorGravatar Dirk Hohndel <dirk@hohndel.org>2012-11-19 20:43:49 -0800
committerGravatar Dirk Hohndel <dirk@hohndel.org>2012-11-19 20:49:45 -0800
commit8e4d4970ecf348566046a5fd8aaee13a42b1a7e4 (patch)
treed42470e341b0faa241551301562ca2e00cd183a2 /README
parentf3d87a2b164cd605620a8d2e5cd0b35bfc28ce2d (diff)
downloadsubsurface-8e4d4970ecf348566046a5fd8aaee13a42b1a7e4.tar.gz
Fix another off by one error in Uemis native downloader
And again buffer_insert contained the blatant bug. The code wasn't copying the trailing '\0' when extending the string, which usually didn't end up blowing up the code (and therefore kept the bug hidden until now) because of the way realloc reused memory - we just had trailing garbage strings. But sometimes we weren't so lucky and the strlen in a subsequent call of buffer_insert would run past the end of the allocated buffer. Oops. Signed-off-by: Dirk Hohndel <dirk@hohndel.org>
Diffstat (limited to 'README')
0 files changed, 0 insertions, 0 deletions