Blame SOURCES/flac-metaflac_strcat.patch

a2a159
From 78055800dd8fd2563e9248fcafda81a211fcc4d2 Mon Sep 17 00:00:00 2001
a2a159
From: Miroslav Lichvar <mlichvar@redhat.com>
a2a159
Date: Mon, 3 Jun 2013 12:54:59 +0200
a2a159
Subject: [PATCH 1/2] metaflac : Fix local_strcat() to terminate string
a2a159
 correctly.
a2a159
a2a159
The NUL char is written at incorrect place when the destination string
a2a159
is longer than 0, which causes memory corruption. It was broken by
a2a159
commit 2d6354ff2a618a79d40edbd4f208b4b07c5422f1.
a2a159
---
a2a159
 src/metaflac/utils.c | 2 +-
a2a159
 1 file changed, 1 insertion(+), 1 deletion(-)
a2a159
a2a159
diff --git a/src/metaflac/utils.c b/src/metaflac/utils.c
a2a159
index 097537b..8a31daa 100644
a2a159
--- a/src/metaflac/utils.c
a2a159
+++ b/src/metaflac/utils.c
a2a159
@@ -75,7 +75,7 @@ void local_strcat(char **dest, const char *source)
a2a159
 	*dest = safe_realloc_add_3op_(*dest, ndest, /*+*/nsource, /*+*/1);
a2a159
 	if(0 == *dest)
a2a159
 		die("out of memory growing string");
a2a159
-	safe_strncpy((*dest)+ndest, source, ndest + nsource + 1);
a2a159
+	safe_strncpy((*dest)+ndest, source, nsource + 1);
a2a159
 }
a2a159
 
a2a159
 static inline int local_isprint(int c)
a2a159
-- 
a2a159
1.8.1.4
a2a159