diff options
| author | Rob Landley <rob@landley.net> | 2019-03-17 17:27:26 -0500 |
|---|---|---|
| committer | Rob Landley <rob@landley.net> | 2019-03-17 17:27:26 -0500 |
| commit | 6f987c55215147d4ae18b7b4a7ddd35dda9cd01e (patch) | |
| tree | 51e667a337d9feeacfaf56ccff4cc8b3184ef678 /toys | |
| parent | 51eb95b5455ad4435de0e368dcdb1008a4fd10c6 (diff) | |
| download | toybox-6f987c55215147d4ae18b7b4a7ddd35dda9cd01e.tar.gz | |
Fix xstrndup() bug.
Now there's a second user... the libc function already null terminates
at len+1, and it doesn't malloc the full size if strlen() smaller so
the redundant termination stomped unallocated memory. Oops.
sort.c never noticed because it calculated length to truncate or copy
existing string, so never hit this.
Diffstat (limited to 'toys')
0 files changed, 0 insertions, 0 deletions