summaryrefslogtreecommitdiff
blob: a842b56335f843733d7baa30d7874f3e4d00b351 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
fix for buffer overflow CVE-2006-4810

http://bugs.gentoo.org/154316

--- util/texindex.c
+++ util/texindex.c
@@ -858,7 +857,7 @@
         {
           buffer = (char *) xrealloc (buffer, linebuffer->size *= 2);
           p += buffer - linebuffer->buffer;
-          end += buffer - linebuffer->buffer;
+          end = buffer + linebuffer->size;
           linebuffer->buffer = buffer;
         }
       if (c < 0 || c == '\n')