From: Roger Dingledine <arma@torproject.org>
Date: Fri, 15 Jan 2010 20:55:08 +0000 (-0500)
Subject: fix an impossible-to-actually-trigger overflow in descriptor generation
X-Git-Tag: tor-0.2.2.7-alpha~11
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=f1d74f611d57ab87f8e408aa23a73fd9552e95c9;p=thirdparty%2Ftor.git

fix an impossible-to-actually-trigger overflow in descriptor generation
---

diff --git a/src/or/rephist.c b/src/or/rephist.c
index 7f71dc0fba..e606db3b7b 100644
--- a/src/or/rephist.c
+++ b/src/or/rephist.c
@@ -1613,7 +1613,7 @@ rep_hist_get_bandwidth_lines(int for_extrainfo)
   size_t len;
 
   /* opt (read|write)-history yyyy-mm-dd HH:MM:SS (n s) n,n,n,n,n... */
-  len = (60+20*NUM_TOTALS)*2;
+  len = (60+21*NUM_TOTALS)*2;
   buf = tor_malloc_zero(len);
   cp = buf;
   for (r=0;r<2;++r) {