Wrong buffer size calcualtion in msn_httpconn_parse_data
    Mark Doliner 
    mark at kingant.net
       
    Mon Aug  8 00:20:33 EDT 2011
    
    
  
On Thu, Jul 14, 2011 at 8:37 AM, Marius Wachtler <undingen at gmail.com> wrote:
> My compiler found a bug
What compiler are you using??  It seems to be good at finding bugs.
>        buf = s;
>        size -= (s - buf);
>
> The last two lines should be swaped, otherwise the buffer size will
> not be reduced.
Yep, I totally agree.  As currently written the "size -= (s - buf)"
line is always a no-op.
--Mark
    
    
More information about the security
mailing list