diff options
author | nobu <nobu@b2dd03c8-39d4-4d8f-98ff-823fe69b080e> | 2010-08-05 03:39:19 +0000 |
---|---|---|
committer | nobu <nobu@b2dd03c8-39d4-4d8f-98ff-823fe69b080e> | 2010-08-05 03:39:19 +0000 |
commit | ae824807055802a812a23f19cd1a5086223df11d (patch) | |
tree | abbfe40afb841de24e94965ddd9ca96b58319413 /string.c | |
parent | a2ebc53ec49b0fe42c3fe91dba13e3400a93ade7 (diff) |
* string.c (str_make_independent_expand): fix buffer overflow
while shrinking.
git-svn-id: svn+ssh://ci.ruby-lang.org/ruby/trunk@28863 b2dd03c8-39d4-4d8f-98ff-823fe69b080e
Diffstat (limited to 'string.c')
-rw-r--r-- | string.c | 3 |
1 files changed, 2 insertions, 1 deletions
@@ -1271,8 +1271,9 @@ str_make_independent_expand(VALUE str, long expand) ptr = ALLOC_N(char, len+expand+1); if (RSTRING_PTR(str)) { - memcpy(ptr, RSTRING_PTR(str), len); + memcpy(ptr, RSTRING_PTR(str), expand < 0 ? len + expand : len); } + len += expand; STR_SET_NOEMBED(str); ptr[len] = 0; RSTRING(str)->as.heap.ptr = ptr; |