tags 546301 patch
thanks

Hi,

I encountered the same problem a few days ago and was able to identify
the reason for that kind of memory corruption. A function for string
quoting miscalculates the available buffer space and subsequently called
helper functions start to overwrite data belonging to the memory
management.

This might also fix the memory corruption reported in bug #533040

The following patch solved the problem for me:

--- a/util.c    2009-10-30 05:09:07.000000000 +0100
+++ b/util.c    2009-10-30 05:09:25.000000000 +0100
@@ -549,14 +549,14 @@
        }
 
        if (len < 0) {
-               size = max_strlen + 1;
+               size = max_strlen;
                if (umovestr(tcp, addr, size, str) < 0) {
                        tprintf("%#lx", addr);
                        return;
                }
        }
        else {
-               size = MIN(len, max_strlen + 1);
+               size = MIN(len, max_strlen);
                if (umoven(tcp, addr, size, str) < 0) {
                        tprintf("%#lx", addr);
                        return;


Regards,
Klaus.




-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to