From 9d25c392ba73065ac20f518d1cef1cdc96860545 Mon Sep 17 00:00:00 2001 From: Andreas Schwab Date: Fri, 4 Mar 2011 00:48:00 -0500 Subject: Don't read past end of buffer in fmemopen --- libio/fmemopen.c | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) (limited to 'libio') diff --git a/libio/fmemopen.c b/libio/fmemopen.c index d3750fc7de..1a631d5122 100644 --- a/libio/fmemopen.c +++ b/libio/fmemopen.c @@ -1,5 +1,5 @@ /* Fmemopen implementation. - Copyright (C) 2000, 2002, 2005, 2006, 2008, 2009 + Copyright (C) 2000, 2002, 2005, 2006, 2008, 2009, 2011 Free Software Foundation, Inc. This file is part of the GNU C Library. Contributed by Hanno Mueller, kontakt@hanno.de, 2000. @@ -243,7 +243,7 @@ fmemopen (void *buf, size_t len, const char *mode) if (mode[0] == 'w') c->buffer[0] = '\0'; - c->maxpos = strlen (c->buffer); + c->maxpos = strnlen (c->buffer, len); if (mode[0] == 'a') c->pos = c->maxpos; -- cgit 1.4.1