diff options
author | jow <jow@3c298f89-4303-0410-b956-a3cf2f4a3e73> | 2012-05-30 15:30:07 +0000 |
---|---|---|
committer | jow <jow@3c298f89-4303-0410-b956-a3cf2f4a3e73> | 2012-05-30 15:30:07 +0000 |
commit | 8407669751574909c4814266179b1a7c9f826d93 (patch) | |
tree | ef6a3c1386ddf28f39c10030239a9b5c453aa2b1 | |
parent | 4e8baff3b76ee5ff24da13a8e7cf2d220c2aa35d (diff) | |
download | uhttpd-8407669751574909c4814266179b1a7c9f826d93.tar.gz |
[package] uhttpd: fix wrongly applied sizeof() leading to writing beyound end of buffer and subsequent data corruption (#11557)
git-svn-id: svn://svn.openwrt.org/openwrt/trunk/package/uhttpd/src@32005 3c298f89-4303-0410-b956-a3cf2f4a3e73
-rw-r--r-- | uhttpd.c | 4 |
1 files changed, 2 insertions, 2 deletions
@@ -385,10 +385,10 @@ static struct http_request * uh_http_header_recv(struct client *cl) char *bufptr = cl->httpbuf.buf; char *idxptr = NULL; - ssize_t blen = sizeof(cl->httpbuf)-1; + ssize_t blen = sizeof(cl->httpbuf.buf)-1; ssize_t rlen = 0; - memset(bufptr, 0, sizeof(cl->httpbuf)); + memset(bufptr, 0, sizeof(cl->httpbuf.buf)); while (blen > 0) { |