map_and: fix writing outside of target map memory

`ti` already points somewhere in the target, depending on the source
size, adding full `t->size` goes out of bounds.

diff --git a/src/bitmap.c b/src/bitmap.c
index 2a708342a1be6c8d078e8c54bcdbdb82565444f0..d482eddc6226071995980c07e668384e95c78dad 100644 (file)
--- a/src/bitmap.c
+++ b/src/bitmap.c
@@ -69,7 +69,7 @@ map_and(Map *t, const Map *s)
   end = ti + (t->size < s->size ? t->size : s->size);
   while (ti < end)
     *ti++ &= *si++;
-  end = ti + t->size;
+  end = t->map + t->size;
   while (ti < end)
     *ti++ = 0;
 }