From f1d74f611d57ab87f8e408aa23a73fd9552e95c9 Mon Sep 17 00:00:00 2001 From: Roger Dingledine <arma@torproject.org> Date: Fri, 15 Jan 2010 15:55:08 -0500 Subject: [PATCH] fix an impossible-to-actually-trigger overflow in descriptor generation --- src/or/rephist.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/or/rephist.c b/src/or/rephist.c index 7f71dc0fba..e606db3b7b 100644 --- a/src/or/rephist.c +++ b/src/or/rephist.c @@ -1613,7 +1613,7 @@ rep_hist_get_bandwidth_lines(int for_extrainfo) size_t len; /* opt (read|write)-history yyyy-mm-dd HH:MM:SS (n s) n,n,n,n,n... */ - len = (60+20*NUM_TOTALS)*2; + len = (60+21*NUM_TOTALS)*2; buf = tor_malloc_zero(len); cp = buf; for (r=0;r<2;++r) { -- GitLab