[evince] dvi: Another fix for buffer overwrite in dvi-backend
- From: Carlos Garcia Campos <carlosgc src gnome org>
- To: commits-list gnome org
- Cc:
- Subject: [evince] dvi: Another fix for buffer overwrite in dvi-backend
- Date: Sun, 20 Mar 2011 10:01:49 +0000 (UTC)
commit efadec4ffcdde3373f6f4ca0eaac98dc963c4fd5
Author: Scott Reeves <sreeves novell com>
Date: Sun Mar 20 11:01:07 2011 +0100
dvi: Another fix for buffer overwrite in dvi-backend
https://bugzilla.gnome.org/show_bug.cgi?id=643882
backend/dvi/mdvi-lib/afmparse.c | 4 ++--
1 files changed, 2 insertions(+), 2 deletions(-)
---
diff --git a/backend/dvi/mdvi-lib/afmparse.c b/backend/dvi/mdvi-lib/afmparse.c
index e1cd115..f90e557 100644
--- a/backend/dvi/mdvi-lib/afmparse.c
+++ b/backend/dvi/mdvi-lib/afmparse.c
@@ -160,7 +160,7 @@ static char *token(FILE *stream)
idx = 0;
while (ch != EOF && ch != ' ' && ch != lineterm
- && ch != '\t' && ch != ':' && ch != ';' && idx < MAX_NAME)
+ && ch != '\t' && ch != ':' && ch != ';' && idx < (MAX_NAME - 1))
{
ident[idx++] = ch;
ch = fgetc(stream);
@@ -190,7 +190,7 @@ static char *linetoken(FILE *stream)
while ((ch = fgetc(stream)) == ' ' || ch == '\t' );
idx = 0;
- while (ch != EOF && ch != lineterm && idx < MAX_NAME)
+ while (ch != EOF && ch != lineterm && idx < (MAX_NAME - 1))
{
ident[idx++] = ch;
ch = fgetc(stream);
[
Date Prev][
Date Next] [
Thread Prev][
Thread Next]
[
Thread Index]
[
Date Index]
[
Author Index]