From f1d74f611d57ab87f8e408aa23a73fd9552e95c9 Mon Sep 17 00:00:00 2001
From: Roger Dingledine <arma@torproject.org>
Date: Fri, 15 Jan 2010 15:55:08 -0500
Subject: [PATCH] fix an impossible-to-actually-trigger overflow in descriptor
 generation

---
 src/or/rephist.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/or/rephist.c b/src/or/rephist.c
index 7f71dc0fba..e606db3b7b 100644
--- a/src/or/rephist.c
+++ b/src/or/rephist.c
@@ -1613,7 +1613,7 @@ rep_hist_get_bandwidth_lines(int for_extrainfo)
   size_t len;
 
   /* opt (read|write)-history yyyy-mm-dd HH:MM:SS (n s) n,n,n,n,n... */
-  len = (60+20*NUM_TOTALS)*2;
+  len = (60+21*NUM_TOTALS)*2;
   buf = tor_malloc_zero(len);
   cp = buf;
   for (r=0;r<2;++r) {
-- 
GitLab