[PATCH 2/4] Fix integer overflow in patch_delta()

From

ILIlari Liusvaara <ilari.liusvaara@elisanet.fi>

Date

Jan 26, 2010, 18:24 UTC

Message-ID

<1264530255-4682-3-git-send-email-ilari.liusvaara@elisanet.fi>

In-Reply-To

<1264530255-4682-1-git-send-email-ilari.liusvaara@elisanet.fi>

Signed-off-by: Ilari Liusvaara <ilari.liusvaara@elisanet.fi>
---
 patch-delta.c |    3 +--
 1 files changed, 1 insertions(+), 2 deletions(-)

diff --git a/patch-delta.c b/patch-delta.c
index e02e13b..d218faa 100644
--- a/patch-delta.c
+++ b/patch-delta.c
@@ -33,8 +33,7 @@ void *patch_delta(const void *src_buf, unsigned long src_size,
 
 	/* now the result size */
 	size = get_delta_hdr_size(&data, top);
-	dst_buf = xmalloc(size + 1);
-	dst_buf[size] = 0;
+	dst_buf = xmallocz(size);
 
 	out = dst_buf;
 	while (data < top) {

-- 
1.6.6.1.439.gf06b6