You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@tomcat.apache.org by ma...@apache.org on 2001/06/19 04:42:23 UTC

cvs commit: jakarta-tomcat/src/share/org/apache/tomcat/service/connector MsgBuffer.java

marcsaeg    01/06/18 19:42:23

  Modified:    src/share/org/apache/tomcat/service/connector Tag: tomcat_32
                        MsgBuffer.java
  Log:
  Fix buffer bounds check.
  
  PR: 1528
  Submitted by:	ulf.leonhardt@jtrix.org
  
  Revision  Changes    Path
  No                   revision
  
  
  No                   revision
  
  
  1.7.2.2   +4 -4      jakarta-tomcat/src/share/org/apache/tomcat/service/connector/Attic/MsgBuffer.java
  
  Index: MsgBuffer.java
  ===================================================================
  RCS file: /home/cvs/jakarta-tomcat/src/share/org/apache/tomcat/service/connector/Attic/MsgBuffer.java,v
  retrieving revision 1.7.2.1
  retrieving revision 1.7.2.2
  diff -u -r1.7.2.1 -r1.7.2.2
  --- MsgBuffer.java	2000/12/12 09:41:44	1.7.2.1
  +++ MsgBuffer.java	2001/06/19 02:42:23	1.7.2.2
  @@ -1,7 +1,7 @@
   /*
  - * $Header: /home/cvs/jakarta-tomcat/src/share/org/apache/tomcat/service/connector/Attic/MsgBuffer.java,v 1.7.2.1 2000/12/12 09:41:44 hgomez Exp $
  - * $Revision: 1.7.2.1 $
  - * $Date: 2000/12/12 09:41:44 $
  + * $Header: /home/cvs/jakarta-tomcat/src/share/org/apache/tomcat/service/connector/Attic/MsgBuffer.java,v 1.7.2.2 2001/06/19 02:42:23 marcsaeg Exp $
  + * $Revision: 1.7.2.2 $
  + * $Date: 2001/06/19 02:42:23 $
    *
    * ====================================================================
    *
  @@ -158,7 +158,7 @@
       public void appendBytes( byte b[], int off, int len ) {
   	BuffTool.addInt( buff, pos, len );
   	pos+=2;
  -	if( pos + len > buff.length ) {
  +	if( pos + len >= buff.length ) {
   	    System.out.println("Buffer overflow " + buff.length + " " + pos + " " + len );
   	}
   	System.arraycopy( b, off, buff, pos, len);