You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@apr.apache.org by bo...@apache.org on 2009/05/22 00:12:50 UTC

svn commit: r777289 - in /apr/apr-util/branches/0.9.x: CHANGES buckets/apr_brigade.c

Author: bojan
Date: Thu May 21 22:12:50 2009
New Revision: 777289

URL: http://svn.apache.org/viewvc?rev=777289&view=rev
Log:
Backport r768417 from the trunk.
Fix off by one overflow in apr_brigade_vprintf.
For the gory details see
http://mail-archives.apache.org/mod_mbox/apr-dev/200904.mbox/%3c49F21CD2.5020105@collab.net%3e

Submitted by: C. Michael Pilato <cmpilato collab.net>
Reviewed by: rpluem, trawick

Modified:
    apr/apr-util/branches/0.9.x/CHANGES
    apr/apr-util/branches/0.9.x/buckets/apr_brigade.c   (contents, props changed)

Modified: apr/apr-util/branches/0.9.x/CHANGES
URL: http://svn.apache.org/viewvc/apr/apr-util/branches/0.9.x/CHANGES?rev=777289&r1=777288&r2=777289&view=diff
==============================================================================
--- apr/apr-util/branches/0.9.x/CHANGES [utf-8] (original)
+++ apr/apr-util/branches/0.9.x/CHANGES [utf-8] Thu May 21 22:12:50 2009
@@ -1,6 +1,9 @@
                                                      -*- coding: utf-8 -*-
 Changes with APR-util 0.9.16
 
+  *) Fix off by one overflow in apr_brigade_vprintf.
+     [C. Michael Pilato <cmpilato collab.net>]
+
   *) Better error detection for bucket allocation failures. 
      [Jim Jagielski]
 

Modified: apr/apr-util/branches/0.9.x/buckets/apr_brigade.c
URL: http://svn.apache.org/viewvc/apr/apr-util/branches/0.9.x/buckets/apr_brigade.c?rev=777289&r1=777288&r2=777289&view=diff
==============================================================================
--- apr/apr-util/branches/0.9.x/buckets/apr_brigade.c (original)
+++ apr/apr-util/branches/0.9.x/buckets/apr_brigade.c Thu May 21 22:12:50 2009
@@ -653,9 +653,6 @@
       return -1;
     }
 
-    /* tack on null terminator to remaining string */
-    *(vd.vbuff.curpos) = '\0';
-
     /* write out what remains in the buffer */
     return apr_brigade_write(b, flush, ctx, buf, vd.vbuff.curpos - buf);
 }

Propchange: apr/apr-util/branches/0.9.x/buckets/apr_brigade.c
------------------------------------------------------------------------------
    svn:mergeinfo = /apr/apr/trunk/buckets/apr_brigade.c:768417