On Wed, 17 Apr 2002, Simon Glover wrote:

# >+    cstring[s->buflen + 1] = 0;
good grief

# >
#
#  This is a buffer overflow; I'm not quite sure what you're trying to do,
#  but this certainly doesn't do it.

shouldnt cstring[s->bufused +1] = \0
to keep us from clobbering the last char? or will string_grow update
bufused even though we havent 'used' it just yet?

Roman

Reply via email to