Browse Source

* fixed potential buffer overflow in fpc_Write_Text_Char/
fpc_Write_Text_WideChar (bug 4919)

git-svn-id: trunk@3024 -

Jonas Maebe 19 years ago
parent
commit
9d893195b5
1 changed files with 2 additions and 2 deletions
  1. 2 2
      rtl/inc/text.inc

+ 2 - 2
rtl/inc/text.inc

@@ -720,7 +720,7 @@ Begin
    end;
    end;
   If Len>1 Then
   If Len>1 Then
     fpc_WriteBlanks(t,Len-1);
     fpc_WriteBlanks(t,Len-1);
-  If TextRec(t).BufPos+1>=TextRec(t).BufSize Then
+  If TextRec(t).BufPos>=TextRec(t).BufSize Then
     FileFunc(TextRec(t).InOutFunc)(TextRec(t));
     FileFunc(TextRec(t).InOutFunc)(TextRec(t));
   TextRec(t).Bufptr^[TextRec(t).BufPos]:=c;
   TextRec(t).Bufptr^[TextRec(t).BufPos]:=c;
   Inc(TextRec(t).BufPos);
   Inc(TextRec(t).BufPos);
@@ -743,7 +743,7 @@ Begin
    end;
    end;
   If Len>1 Then
   If Len>1 Then
     fpc_WriteBlanks(t,Len-1);
     fpc_WriteBlanks(t,Len-1);
-  If TextRec(t).BufPos+1>=TextRec(t).BufSize Then
+  If TextRec(t).BufPos>=TextRec(t).BufSize Then
     FileFunc(TextRec(t).InOutFunc)(TextRec(t));
     FileFunc(TextRec(t).InOutFunc)(TextRec(t));
   ch:=c;
   ch:=c;
   TextRec(t).Bufptr^[TextRec(t).BufPos]:=ch;
   TextRec(t).Bufptr^[TextRec(t).BufPos]:=ch;