summaryrefslogtreecommitdiff
path: root/src/alloc.c
diff options
context:
space:
mode:
authorChong Yidong <cyd@stupidchicken.com>2006-01-24 18:35:25 +0000
committerChong Yidong <cyd@stupidchicken.com>2006-01-24 18:35:25 +0000
commita0b08700d1a0affe59ce2428cc8d204362924ad7 (patch)
treedf2743cefaf33c990a8c0b2526f7a7557a118f8d /src/alloc.c
parent0d72b43bbbf1eeb3bc8dd7d58abaaead1dc9a4ee (diff)
downloademacs-a0b08700d1a0affe59ce2428cc8d204362924ad7.tar.gz
* alloc.c (allocate_string_data): Update next_free immediately, to
reduce risk of memory clobberage.
Diffstat (limited to 'src/alloc.c')
-rw-r--r--src/alloc.c3
1 files changed, 2 insertions, 1 deletions
diff --git a/src/alloc.c b/src/alloc.c
index d81a9bf853b..f0c77a26710 100644
--- a/src/alloc.c
+++ b/src/alloc.c
@@ -1978,6 +1978,8 @@ allocate_string_data (s, nchars, nbytes)
old_nbytes = GC_STRING_BYTES (s);
data = b->next_free;
+ b->next_free = (struct sdata *) ((char *) data + needed + GC_STRING_EXTRA);
+
data->string = s;
s->data = SDATA_DATA (data);
#ifdef GC_CHECK_STRING_BYTES
@@ -1990,7 +1992,6 @@ allocate_string_data (s, nchars, nbytes)
bcopy (string_overrun_cookie, (char *) data + needed,
GC_STRING_OVERRUN_COOKIE_SIZE);
#endif
- b->next_free = (struct sdata *) ((char *) data + needed + GC_STRING_EXTRA);
/* If S had already data assigned, mark that as free by setting its
string back-pointer to null, and recording the size of the data