(print_it): Avoid buffer overrun that would occur

when the user-specified format string ends with `%'.

diff --git a/src/stat.c b/src/stat.c
index 0bcb1f19a4ed1398197cec0e561e044d3863a898..8b988165393d4046d4147caa3c95229f117f6490 100644 (file)
--- a/src/stat.c
+++ b/src/stat.c
@@ -566,7 +566,6 @@ print_it (char const *masterformat, char const *filename,
 
   char *dest = xmalloc (strlen (format) + 1);
 
-
   b = format;
   while (b)
     {
@@ -583,9 +582,12 @@ print_it (char const *masterformat, char const *filename,
          dest[1 + len] = 0;
          p += len;
 
+         b = p + 1;
          switch (*p)
            {
            case '\0':
+             b = NULL;
+             /* fall through */
            case '%':
              putchar ('%');
              break;
@@ -593,7 +595,6 @@ print_it (char const *masterformat, char const *filename,
              print_func (dest, *p, filename, data);
              break;
            }
-         b = p + 1;
        }
       else
        {