[PATCH 4/4] Fix integer overflow in unpack_compressed_entry()

From: Ilari Liusvaara <ilari.liusvaara@elisanet.fi>
Date: Jan 26, 2010, 18:24 UTC
Message-ID: <1264530255-4682-5-git-send-email-ilari.liusvaara@elisanet.fi>
In-Reply-To: <1264530255-4682-1-git-send-email-ilari.liusvaara@elisanet.fi>

Signed-off-by: Ilari Liusvaara <ilari.liusvaara@elisanet.fi>
---
 sha1_file.c |    3 +--
 1 files changed, 1 insertions(+), 2 deletions(-)

diff --git a/sha1_file.c b/sha1_file.c
index 39f0844..ea2ea75 100644
--- a/sha1_file.c
+++ b/sha1_file.c
@@ -1517,8 +1517,7 @@ static void *unpack_compressed_entry(struct packed_git *p,
 	z_stream stream;
 	unsigned char *buffer, *in;
 
-	buffer = xmalloc(size + 1);
-	buffer[size] = 0;
+	buffer = xmallocz(size);
 	memset(&stream, 0, sizeof(stream));
 	stream.next_out = buffer;
 	stream.avail_out = size + 1;

-- 
1.6.6.1.439.gf06b6