diff options
| author | dgp <dgp@users.sourceforge.net> | 2015-11-10 16:34:04 (GMT) |
|---|---|---|
| committer | dgp <dgp@users.sourceforge.net> | 2015-11-10 16:34:04 (GMT) |
| commit | 533f349b01c0921ad093f3ab59ace53aef4e2602 (patch) | |
| tree | 1d9306a12e4795496921cb288564d6a3ce0419f2 | |
| parent | 04d1b415226ca00c8733a32dafe9f25fa4aee293 (diff) | |
| parent | f3a2810d2049b0ffed472ae53c2e872ed36be307 (diff) | |
| download | tcl-533f349b01c0921ad093f3ab59ace53aef4e2602.zip tcl-533f349b01c0921ad093f3ab59ace53aef4e2602.tar.gz tcl-533f349b01c0921ad093f3ab59ace53aef4e2602.tar.bz2 | |
[261a8a79f0] Integer overflow leads to segfault.
| -rw-r--r-- | generic/tclIO.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/generic/tclIO.c b/generic/tclIO.c index 8e9e346..f93d00d 100644 --- a/generic/tclIO.c +++ b/generic/tclIO.c @@ -6380,7 +6380,7 @@ TranslateInputEOL( break; default: /* In other modes, at most 2 src bytes become a dst byte. */ - if (srcLen > 2 * dstLen) { + if (srcLen/2 > dstLen) { srcLen = 2 * dstLen; } break; |