Mercurial > public > mercurial-scm > hg-stable

diff mercurial/mpatch.c @ 28656:b6ed2505d6cf stable

Find changesets by keywords (author, files, the commit message), revision number or hash, or revset expression.
parsers: fix list sizing rounding error (SEC) CVE-2016-3630 (1/2) This addresses part of a vulnerability in application of binary deltas.
author Matt Mackall <mpm@selenic.com>
date Wed, 16 Mar 2016 17:29:29 -0700
parents 09e41ac6289d
children b9714d958e89
line wrap: on
line diff
--- a/mercurial/mpatch.c	Fri Mar 25 10:47:49 2016 -0700
+++ b/mercurial/mpatch.c	Wed Mar 16 17:29:29 2016 -0700
@@ -205,7 +205,7 @@
 	int pos = 0;
 
 	/* assume worst case size, we won't have many of these lists */
-	l = lalloc(len / 12);
+	l = lalloc(len / 12 + 1);
 	if (!l)
 		return NULL;