diff options
author | Junio C Hamano <gitster@pobox.com> | 2015-10-15 01:34:19 +0300 |
---|---|---|
committer | Junio C Hamano <gitster@pobox.com> | 2015-10-19 08:13:27 +0300 |
commit | b6af8ed13a73a705b79e79ecd7320f3e90e98315 (patch) | |
tree | e841bbd0295024949d6d5edbb8164fffb325639f | |
parent | 3a8fcdaf844910578d91ff225bcb1587ddb4d062 (diff) |
mailinfo: fix an off-by-one error in the boundary stack
We pre-increment the pointer that we will use to store something at,
so the pointer is already beyond the end of the array if it points
at content[MAX_BOUNDARIES].
Signed-off-by: Junio C Hamano <gitster@pobox.com>
-rw-r--r-- | builtin/mailinfo.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/builtin/mailinfo.c b/builtin/mailinfo.c index addc0e00a6..1566c19b62 100644 --- a/builtin/mailinfo.c +++ b/builtin/mailinfo.c @@ -185,7 +185,7 @@ static void handle_content_type(struct strbuf *line) if (slurp_attr(line->buf, "boundary=", boundary)) { strbuf_insert(boundary, 0, "--", 2); - if (++content_top > &content[MAX_BOUNDARIES]) { + if (++content_top >= &content[MAX_BOUNDARIES]) { fprintf(stderr, "Too many boundaries to handle\n"); exit(1); } |