From 7c2ce714d4e853aadbec13b920576fdfada520f1 Mon Sep 17 00:00:00 2001 From: Andreas Schwab Date: Thu, 25 Jun 2015 11:53:06 +0200 Subject: Fix buffer overflow for writes to memory buffer stream (bug 18549) --- libio/fmemopen.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'libio/fmemopen.c') diff --git a/libio/fmemopen.c b/libio/fmemopen.c index 6c50fba221..06e5ab8002 100644 --- a/libio/fmemopen.c +++ b/libio/fmemopen.c @@ -124,7 +124,7 @@ fmemopen_write (void *cookie, const char *b, size_t s) if (c->pos + s + addnullc > c->size) { - if ((size_t) (c->pos + addnullc) == c->size) + if ((size_t) (c->pos + addnullc) >= c->size) { __set_errno (ENOSPC); return 0; -- cgit v1.2.3