diff options
| author | Sam Varshavchik | 2020-11-24 19:09:34 -0500 |
|---|---|---|
| committer | Sam Varshavchik | 2020-11-24 19:37:28 -0500 |
| commit | b89f5f8dc09431bb345308b3a0ffd5f7d22cdfb2 (patch) | |
| tree | c655b4e0bf8fb76b01a117e4feac01253663753a /unicode/unicode_canonical.c | |
| parent | 1d5b075408e8829006d84ba65b922101bd304a25 (diff) | |
| download | courier-libs-b89f5f8dc09431bb345308b3a0ffd5f7d22cdfb2.tar.bz2 | |
Fix bug triggered by cone.
Parameters to memmove were reversed.
len is the size of the buffer. len-pos-cnt characters were copied in error
to position pos+cnt. As such this did not overflow. I.e. if len was 8
(eight chars), pos was 1 and cnt was 2, then 8-2-1=5 characters were copied
to offset 3, right at the end of the buffer. This was just plain wrong.
Diffstat (limited to 'unicode/unicode_canonical.c')
0 files changed, 0 insertions, 0 deletions