lib/idmapping.c: write_mapping(): Fixx off-by-one bug

Link: <https://github.com/shadow-maint/shadow/commit/673c2a6f9aa6c69588f4c1be08589b8d3475a520#r136830993>
Cc: Serge Hallyn <serge@hallyn.com>
Cc: "Eric W. Biederman" <ebiederm@xmission.com>
Signed-off-by: Alejandro Colomar <alx@kernel.org>

diff --git a/lib/idmapping.c b/lib/idmapping.c
index 7454c3d818bc6fc4c2e0429716a3c2bf10217535..c861beb6502fafdd6f800adc67e81581c879523a 100644 (file)
--- a/lib/idmapping.c
+++ b/lib/idmapping.c
@@ -192,7 +192,7 @@ void write_mapping(int proc_dir_fd, int ranges, const struct map_range *mappings
        }
 #endif
 
-       bufsize = ranges * ((ULONG_DIGITS + 1) * 3);
+       bufsize = (ULONG_DIGITS + 1) * 3 * ranges + 1;
        pos = buf = XMALLOC(bufsize, char);
        end = buf + bufsize;