RepoMirrors/musl
1
0
Fork 0
mirror of git://git.musl-libc.org/musl synced 2025-02-15 10:27:12 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix some length calculations in memory streams

Browse Source
This commit is contained in:
Rich Felker 2011-09-03 20:19:51 -04:00
parent 1461e02757
commit 1e69376435
2 changed files with 3 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
src/stdio/open_memstream.c
View File

@ -41,7 +41,7 @@ static size_t ms_write(FILE *f, const unsigned char *buf, size_t len)
f->wpos = f->wbase; f->wpos = f->wbase;
if (ms_write(f, f->wbase, len2) < len2) return 0; if (ms_write(f, f->wbase, len2) < len2) return 0;
} }
if (len > c->space - c->pos) { if (len >= c->space - c->pos) {
len2 = 2*c->space+1 | c->space+len+1; len2 = 2*c->space+1 | c->space+len+1;
newbuf = realloc(c->buf, len2); newbuf = realloc(c->buf, len2);
if (!newbuf) return 0; if (!newbuf) return 0;

4
src/stdio/open_wmemstream.c
View File

@ -39,13 +39,13 @@ static size_t wms_write(FILE *f, const unsigned char *buf, size_t len)
struct cookie *c = f->cookie; struct cookie *c = f->cookie;
size_t len2; size_t len2;
wchar_t *newbuf; wchar_t *newbuf;
if (len > c->space - c->pos) { if (len >= c->space - c->pos) {
len2 = 2*c->space+1 | c->space+len+1; len2 = 2*c->space+1 | c->space+len+1;
if (len2 > SSIZE_MAX/4) return 0; if (len2 > SSIZE_MAX/4) return 0;
newbuf = realloc(c->buf, len2*4); newbuf = realloc(c->buf, len2*4);
if (!newbuf) return 0; if (!newbuf) return 0;
*c->bufp = c->buf = newbuf; *c->bufp = c->buf = newbuf;
memset(c->buf + c->space, 0, len2 - c->space); memset(c->buf + c->space, 0, 4*(len2 - c->space));
c->space = len2; c->space = len2;
} }