tags 546301 patch
thanks
Hi,
I encountered the same problem a few days ago and was able to identify
the reason for that kind of memory corruption. A function for string
quoting miscalculates the available buffer space and subsequently called
helper functions start to overwrite data belonging to the memory
management.
This might also fix the memory corruption reported in bug #533040
The following patch solved the problem for me:
--- a/util.c 2009-10-30 05:09:07.000000000 +0100
+++ b/util.c 2009-10-30 05:09:25.000000000 +0100
@@ -549,14 +549,14 @@
}
if (len < 0) {
- size = max_strlen + 1;
+ size = max_strlen;
if (umovestr(tcp, addr, size, str) < 0) {
tprintf("%#lx", addr);
return;
}
}
else {
- size = MIN(len, max_strlen + 1);
+ size = MIN(len, max_strlen);
if (umoven(tcp, addr, size, str) < 0) {
tprintf("%#lx", addr);
return;
Regards,
Klaus.
--
To UNSUBSCRIBE, email to [email protected]
with a subject of "unsubscribe". Trouble? Contact [email protected]
