aboutsummaryrefslogtreecommitdiff
path: root/src/cmd/htmlroff
diff options
context:
space:
mode:
authorNeven Sajko <nsajko@gmail.com>2019-12-28 21:33:59 +0000
committerDavid du Colombier <0intro@gmail.com>2020-01-02 22:04:42 +0100
commitd9057521e665e1564e38b93ae1fafb53c81cb5d1 (patch)
tree1ca1004f53f624b68319661820144bb224861b2c /src/cmd/htmlroff
parent8cd46ae7bc031f311c833ad32445f5cde1916f99 (diff)
downloadplan9port-d9057521e665e1564e38b93ae1fafb53c81cb5d1.tar.gz
plan9port-d9057521e665e1564e38b93ae1fafb53c81cb5d1.tar.bz2
plan9port-d9057521e665e1564e38b93ae1fafb53c81cb5d1.zip
cmd/htmlroff: fix buffer overflow in t2.c getqarg
This is actually from 2016: https://plan9port-review.googlesource.com/c/plan9/+/1590 Change-Id: I6f2a3d71a9dd589eff7ab15b3c1d3997254b3c35
Diffstat (limited to 'src/cmd/htmlroff')
-rw-r--r--src/cmd/htmlroff/t2.c2
1 files changed, 1 insertions, 1 deletions
diff --git a/src/cmd/htmlroff/t2.c b/src/cmd/htmlroff/t2.c
index 54481d0a..daac3ea1 100644
--- a/src/cmd/htmlroff/t2.c
+++ b/src/cmd/htmlroff/t2.c
@@ -26,7 +26,7 @@ getqarg(void)
Rune *p, *e;
p = buf;
- e = p+sizeof buf-1;
+ e = p + nelem(buf) - 1;
if(getrune() != '\'')
return nil;