From 1bd95380064dd4cce15eb3a900640ee6e7f2b2d2 Mon Sep 17 00:00:00 2001 From: Sverker Eriksson Date: Thu, 28 Jun 2018 14:59:33 +0200 Subject: ic: Fix buffer overrun bug in oe_ei_encode_atom bug exists since OTP-20.3.4 1d3acb70debd134c8346b7e98347171d5cf6fc62 --- lib/ic/c_src/oe_ei_encode_atom.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/lib/ic/c_src/oe_ei_encode_atom.c b/lib/ic/c_src/oe_ei_encode_atom.c index 99a9fe26f0..9d2c1d5aa3 100644 --- a/lib/ic/c_src/oe_ei_encode_atom.c +++ b/lib/ic/c_src/oe_ei_encode_atom.c @@ -30,7 +30,7 @@ int oe_ei_encode_atom(CORBA_Environment *ev, const char *p) { int size = ev->_iout; size_t len = strlen(p); - if (DIRTY_ATOM_ENC_MAX(len) >= ev->_outbufsz) { + if (size + DIRTY_ATOM_ENC_MAX(len) >= ev->_outbufsz) { ei_encode_atom_len(0,&size,p,len); -- cgit v1.2.3