0d1c57
From 1a7533244a1e158ee071e821bbb05cb31c16d25e Mon Sep 17 00:00:00 2001
0d1c57
From: Daniel Stenberg <daniel@haxx.se>
0d1c57
Date: Sun, 28 Oct 2018 01:33:23 +0200
0d1c57
Subject: [PATCH] voutf: fix bad arethmetic when outputting warnings to stderr
0d1c57
0d1c57
CVE-2018-16842
0d1c57
Reported-by: Brian Carpenter
0d1c57
Bug: https://curl.haxx.se/docs/CVE-2018-16842.html
0d1c57
0d1c57
Upstream-commit: d530e92f59ae9bb2d47066c3c460b25d2ffeb211
0d1c57
Signed-off-by: Kamil Dudka <kdudka@redhat.com>
0d1c57
---
0d1c57
 src/tool_msgs.c | 4 ++--
0d1c57
 1 file changed, 2 insertions(+), 2 deletions(-)
0d1c57
0d1c57
diff --git a/src/tool_msgs.c b/src/tool_msgs.c
0d1c57
index 80fdf4e..ce47e9a 100644
0d1c57
--- a/src/tool_msgs.c
0d1c57
+++ b/src/tool_msgs.c
0d1c57
@@ -67,8 +67,8 @@ void warnf(struct Configurable *config, const char *fmt, ...)
0d1c57
 
0d1c57
         (void)fwrite(ptr, cut + 1, 1, config->errors);
0d1c57
         fputs("\n", config->errors);
0d1c57
-        ptr += cut+1; /* skip the space too */
0d1c57
-        len -= cut;
0d1c57
+        ptr += cut + 1; /* skip the space too */
0d1c57
+        len -= cut + 1;
0d1c57
       }
0d1c57
       else {
0d1c57
         fputs(ptr, config->errors);
0d1c57
-- 
0d1c57
2.17.2
0d1c57