| commit | 60fd9a3698956b22cb34a7553cf38cf679f473a6 | [log] [tgz] |
|---|---|---|
| author | Selim Gurun <sgurun@google.com> | Tue Apr 03 10:25:15 2012 -0700 |
| committer | Selim Gurun <sgurun@google.com> | Tue Apr 03 10:52:23 2012 -0700 |
| tree | 9a62badbabc7979996587b6ef1ef5d0d399f0ca2 | |
| parent | 82fe084c750cb2e6c839ec8b6aad5e2bb87c14dd [diff] |
DO NOT MERGE Fix for CVE-2011-3919 Bug: 6086504 Change-Id: I9c5c9868ff4c2fe89f3dabb3267f07d3b67c1b00
diff --git a/parser.c b/parser.c index 671a83a..6de2ef4 100644 --- a/parser.c +++ b/parser.c
@@ -2570,7 +2570,7 @@ buffer[nbchars++] = '&'; if (nbchars > buffer_size - i - XML_PARSER_BUFFER_SIZE) { - growBuffer(buffer, XML_PARSER_BUFFER_SIZE); + growBuffer(buffer, i + XML_PARSER_BUFFER_SIZE); } for (;i > 0;i--) buffer[nbchars++] = *cur++;