- added fix for off-by-one in cat_stringbuf()

[packages/cvs-nserver.git] / cvs-nserver-segv.patch

diff --git a/cvs-nserver-segv.patch b/cvs-nserver-segv.patch
index 0022dc50301e16a3a428e4c28cbee8709cc30808..8e07d6f9d43c643688ce434e661ca9888c056362 100644 (file)
--- a/cvs-nserver-segv.patch
+++ b/cvs-nserver-segv.patch
@@ -46,3 +46,14 @@
            set_repository();
            load_cvsgroups();
            load_acladmins();
+--- cvs-nserver-1.11.1.52/acl/stringbuf.c.orig 2002-01-19 18:33:05.000000000 +0100
++++ cvs-nserver-1.11.1.52/acl/stringbuf.c      2005-02-19 00:25:08.200786152 +0100
+@@ -119,7 +119,7 @@
+     if (len == 0)
+       return buf;
+ 
+-    if (buf->len + len > buf->allocated) {
++    if (buf->len + len >= buf->allocated) {
+       size_t needs_to_allocate = buf->allocated + len * 2 + 1;
+       char *tmp = (char *) realloc(buf->buf, needs_to_allocate);
+       if (tmp == NULL)