diff options
author | Ruediger Pluem <rpluem@apache.org> | 2009-04-24 20:58:21 +0000 |
---|---|---|
committer | Ruediger Pluem <rpluem@apache.org> | 2009-04-24 20:58:21 +0000 |
commit | 302c57d1aa4148936fac354c23b7be8887697f46 (patch) | |
tree | a9d126a83fb58f6ce78c1821565b39efd32e65d7 /buckets | |
parent | 59027531933c1bf78538c59b07a603f985f5a630 (diff) | |
download | apr-302c57d1aa4148936fac354c23b7be8887697f46.tar.gz |
* Fix off by one overflow in apr_brigade_vprintf.
For the gory details see
http://mail-archives.apache.org/mod_mbox/apr-dev/200904.mbox/%3c49F21CD2.5020105@collab.net%3e
Submitted by: C. Michael Pilato <cmpilato collab.net>
Reviewed by: rpluem, trawick
git-svn-id: https://svn.apache.org/repos/asf/apr/apr/trunk@768417 13f79535-47bb-0310-9956-ffa450edef68
Diffstat (limited to 'buckets')
-rw-r--r-- | buckets/apr_brigade.c | 3 |
1 files changed, 0 insertions, 3 deletions
diff --git a/buckets/apr_brigade.c b/buckets/apr_brigade.c index a5c392d16..77adefff9 100644 --- a/buckets/apr_brigade.c +++ b/buckets/apr_brigade.c @@ -689,9 +689,6 @@ APU_DECLARE(apr_status_t) apr_brigade_vprintf(apr_bucket_brigade *b, return -1; } - /* tack on null terminator to remaining string */ - *(vd.vbuff.curpos) = '\0'; - /* write out what remains in the buffer */ return apr_brigade_write(b, flush, ctx, buf, vd.vbuff.curpos - buf); } |