Fixed mpn_get_base256_le buffer overwrite.

1 files changed, 1 insertions, 0 deletions

diff --git a/gmp-glue.c b/gmp-glue.c
index 5de167eb..f9a5e358 100644
--- a/gmp-glue.c
+++ b/gmp-glue.c
@@ -293,6 +293,7 @@ mpn_get_base256_le (uint8_t *rp, size_t rn,
 	  in = *xp++;
 	  xn--;
 	  *rp++ = old | (in << bits);
+	  rn--;
 	  in >>= (8 - bits);
 	  bits += GMP_NUMB_BITS - 8;
 	}