mirror of
https://github.com/clearlinux/uwsgi.git
synced 2026-08-19 03:57:21 +00:00
buffer over-read fix in magic_sub
This commit is contained in:
+1
-1
@@ -1839,7 +1839,7 @@ char *magic_sub(char *buffer, size_t len, size_t * size, char *magic_table[]) {
|
||||
for (i = 0; i < len; i++) {
|
||||
if (buffer[i] == '%' && (i + 1) < len && magic_table[(unsigned char) buffer[i + 1]]) {
|
||||
old_magic_buf = magic_buf;
|
||||
magic_buf = uwsgi_concat3n(old_magic_buf, magic_len, magic_table[(unsigned char) buffer[i + 1]], strlen(magic_table[(unsigned char) buffer[i + 1]]), buffer + i + 2, len - i);
|
||||
magic_buf = uwsgi_concat3n(old_magic_buf, magic_len, magic_table[(unsigned char) buffer[i + 1]], strlen(magic_table[(unsigned char) buffer[i + 1]]), buffer + i + 2, len - i - 2);
|
||||
free(old_magic_buf);
|
||||
magic_len += strlen(magic_table[(unsigned char) buffer[i + 1]]);
|
||||
magic_ptr = magic_buf + magic_len;
|
||||
|
||||
Reference in New Issue
Block a user