Fix off by one error that overflowed the rep_len array when doing

the final NUL termination.

Reported by:	Coverity
CID:		1007617
MFC after:	1 week
This commit is contained in:
Don Lewis 2016-05-16 19:48:02 +00:00
parent c69cee69f9
commit d2c82c0cfe
Notes: svn2git 2020-12-20 02:59:44 +00:00
svn path=/head/; revision=299971

View file

@ -521,7 +521,7 @@ void terminate(int status)
size_t rep_len;
rep_len = strlen(report_buffer);
while (rep_len + 1 <= sizeof(report_buffer)) {
while (rep_len + 1 < sizeof(report_buffer)) {
alarm(1);
c = get_char();
alarm(0);