mirrors/cgit
0
0
Fork 0
mirror of https://git.zx2c4.com/cgit synced 2024-11-25 18:08:41 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix segfault when displaying empty blobs

Browse Source 
When size is zero, subtracting one from it turns it into
ULONG_MAX which causes an out-of-bounds access on buf.

Signed-off-by: Eric Wong <normalperson@yhbt.net>
Signed-off-by: Lars Hjemli <hjemli@gmail.com>
This commit is contained in:
Eric Wong 2009-03-14 18:41:47 -07:00 committed by Lars Hjemli
parent 6063e7b553
commit 112973615a
1 changed files with 8 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
ui-tree.c
View File

@ -25,12 +25,15 @@ static void print_text_buffer(char *buf, unsigned long size)
html("<tr><td class='linenumbers'><pre>"); html("<tr><td class='linenumbers'><pre>");
idx = 0; idx = 0;
lineno = 0; lineno = 0;
if (size) {
htmlf(numberfmt, ++lineno); htmlf(numberfmt, ++lineno);
while(idx < size - 1) { // skip absolute last newline while(idx < size - 1) { // skip absolute last newline
if (buf[idx] == '\n') if (buf[idx] == '\n')
htmlf(numberfmt, ++lineno); htmlf(numberfmt, ++lineno);
idx++; idx++;
} }
}
html("</pre></td>\n"); html("</pre></td>\n");
html("<td class='lines'><pre><code>"); html("<td class='lines'><pre><code>");
html_txt(buf); html_txt(buf);