From: Ilari Liusvaara Date: Tue, 26 Jan 2010 18:24:14 GMT Subject: [PATCH 3/4] Fix integer overflow in unpack_sha1_rest() Message-ID: <1264530255-4682-4-git-send-email-ilari.liusvaara@elisanet.fi> In-Reply-To: <1264530255-4682-1-git-send-email-ilari.liusvaara@elisanet.fi> Signed-off-by: Ilari Liusvaara --- sha1_file.c | 2 +- 1 files changed, 1 insertions(+), 1 deletions(-) diff --git a/sha1_file.c b/sha1_file.c index 12478a3..39f0844 100644 --- a/sha1_file.c +++ b/sha1_file.c @@ -1166,7 +1166,7 @@ static int unpack_sha1_header(z_stream *stream, unsigned char *map, unsigned lon static void *unpack_sha1_rest(z_stream *stream, void *buffer, unsigned long size, const unsigned char *sha1) { int bytes = strlen(buffer) + 1; - unsigned char *buf = xmalloc(1+size); + unsigned char *buf = xmallocz(size); unsigned long n; int status = Z_OK; -- 1.6.6.1.439.gf06b6