From abec80e6ceb4e3cb90200ffcd597ab17d7d37d81 Mon Sep 17 00:00:00 2001 From: Adria Garriga Date: Thu, 7 Aug 2014 02:11:46 +0200 Subject: [PATCH] Fixed buffer overflow when p-res==targetlen in function getreqentry --- quark.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/quark.c b/quark.c index da8c4b3..574fb9b 100644 --- a/quark.c +++ b/quark.c @@ -363,7 +363,7 @@ getreqentry(char *name, char *target, size_t targetlen, char *breakchars) { for(p = res; *p && !strchr(breakchars, *p); ++p); if(!*p) return 1; - if((size_t)(p - res) > targetlen) + if((size_t)(p - res) >= targetlen) return 1; memcpy(target, res, p - res); target[p - res] = 0;