SymbX/systemd
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

udevd: queue-export - fix crash

Browse Source 
The math in skip_to() was the wrong way round and allocated a
variable size array on the stack with a massively negative size.

Signed-off-by: Alan Jenkins <alan-jenkins@tuffmail.co.uk>
This commit is contained in:
Alan Jenkins
2009-05-28 19:19:42 +02:00
committed by Kay Sievers
parent a29b30b411
commit 542aeeb48a
1 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
udev/lib/libudev-queue-export.c
+2 -2
View File
@@ -115,8 +115,8 @@ static int skip_to(FILE *file, long offset)
/* fseek may drop buffered data, avoid it for small seeks */
old_offset = ftell(file);
if (offset > old_offset && old_offset - offset <= BUFSIZ) {
size_t skip_bytes = old_offset - offset;
if (offset > old_offset && offset - old_offset <= BUFSIZ) {
size_t skip_bytes = offset - old_offset;
char buf[skip_bytes];
if (fread(buf, skip_bytes, 1, file) != skip_bytes)