瀏覽代碼

fix out-of-bounds malloc

richarddobson 3 月之前
父節點
當前提交
00b39b0f0a
共有 1 個文件被更改,包括 1 次插入1 次删除
  1. 1 1
      dev/new/shifter.c

+ 1 - 1
dev/new/shifter.c

@@ -1929,7 +1929,7 @@ int shifter_param_preprocess(dataptr dz)
     }
     }
     //    2 double array for llev, rlev
     //    2 double array for llev, rlev
 
 
-    if((dz->parray = (double **)malloc(sizeof(double *)))==NULL) {
+    if((dz->parray = (double **)malloc(2 * sizeof(double *)))==NULL) {
         sprintf(errstr,"INSUFFICIENT MEMORY to create doubles arrays.\n");
         sprintf(errstr,"INSUFFICIENT MEMORY to create doubles arrays.\n");
         return(MEMORY_ERROR);
         return(MEMORY_ERROR);
     }
     }