[PATCH v3 03/34] mailinfo: fix an off-by-one error in the boundary stack
- From
Junio C Hamano <gitster@pobox.com>
- Date
- Oct 19, 2015, 07:28 UTC
- Message-ID
- <1445239731-10677-4-git-send-email-gitster@pobox.com>
- In-Reply-To
- <1445239731-10677-1-git-send-email-gitster@pobox.com>
We pre-increment the pointer that we will use to store something at, so the pointer is already beyond the end of the array if it points at content[MAX_BOUNDARIES].
Signed-off-by: Junio C Hamano <gitster@pobox.com> --- builtin/mailinfo.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/builtin/mailinfo.c b/builtin/mailinfo.c index addc0e0..1566c19 100644 --- a/builtin/mailinfo.c +++ b/builtin/mailinfo.c @@ -185,7 +185,7 @@ static void handle_content_type(struct strbuf *line) if (slurp_attr(line->buf, "boundary=", boundary)) { strbuf_insert(boundary, 0, "--", 2); - if (++content_top > &content[MAX_BOUNDARIES]) { + if (++content_top >= &content[MAX_BOUNDARIES]) { fprintf(stderr, "Too many boundaries to handle\n"); exit(1); }
-- 2.6.2-383-g144b2e6