win32gui buffer overrun (from <Someone>)
splash screen off by one error overwrote one byte outside the mallocked block
This commit is contained in:
@@ -109,7 +109,7 @@ void mswin_display_splash_window (BOOL show_ver)
|
|||||||
line[len + 1] = '\0';
|
line[len + 1] = '\0';
|
||||||
len++;
|
len++;
|
||||||
}
|
}
|
||||||
if (strsize + (int)len > bufsize)
|
if (strsize + (int)len + 1 > bufsize)
|
||||||
{
|
{
|
||||||
bufsize += BUFSZ;
|
bufsize += BUFSZ;
|
||||||
buf = realloc(buf, bufsize);
|
buf = realloc(buf, bufsize);
|
||||||
@@ -140,7 +140,7 @@ void mswin_display_splash_window (BOOL show_ver)
|
|||||||
line[len + 1] = '\0';
|
line[len + 1] = '\0';
|
||||||
len++;
|
len++;
|
||||||
}
|
}
|
||||||
if (strsize + (int)len > bufsize)
|
if (strsize + (int)len + 1 > bufsize)
|
||||||
{
|
{
|
||||||
bufsize += BUFSZ;
|
bufsize += BUFSZ;
|
||||||
buf = realloc(buf, bufsize);
|
buf = realloc(buf, bufsize);
|
||||||
|
|||||||
Reference in New Issue
Block a user