From 179aea56a099ca29e3b99011cecc3b269bcaed66 Mon Sep 17 00:00:00 2001 From: Alex Shinn Date: Wed, 2 Oct 2013 10:53:01 +0900 Subject: [PATCH] Fix potential memory overwrite in sexp_bignum_fxmul. Patch from Lorenzo. --- bignum.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/bignum.c b/bignum.c index 27cf85dc..83b412c2 100644 --- a/bignum.c +++ b/bignum.c @@ -183,7 +183,7 @@ sexp sexp_bignum_fxmul (sexp ctx, sexp d, sexp a, sexp_uint_t b, int offset) { sexp_gc_var1(tmp); sexp_gc_preserve1(ctx, tmp); if ((! d) || (sexp_bignum_length(d) < len+offset)) - d = tmp = sexp_make_bignum(ctx, len); + d = tmp = sexp_make_bignum(ctx, len+offset); else tmp = d; data = sexp_bignum_data(d);