diff options
| author | Kuang-che Wu <kcwu@google.com> | 2016-08-30 00:32:00 +0000 |
|---|---|---|
| committer | Kuang-che Wu <kcwu@google.com> | 2016-08-30 01:39:53 +0000 |
| commit | c95a43dc92695464be11c8a51811aaa9761546e6 (patch) | |
| tree | 30c4f88ed973ba97d823751c2cdbd95827ac145f /backend.c | |
| parent | Update ChangeLog (diff) | |
| download | w3m-c95a43dc92695464be11c8a51811aaa9761546e6.tar.gz w3m-c95a43dc92695464be11c8a51811aaa9761546e6.zip | |
Fix potential heap buffer corruption due to Strgrow
If Str.length = 5 and area_size = 6, the result of Strgrow is still
area_size = 6. For such case, Strcat_char and Strinsert_char will
overflow one byte.
Diffstat (limited to '')
0 files changed, 0 insertions, 0 deletions