Fossil SCM
Fixed an out-of-bounds array access in stat.c reported in the forum.
Commit
e70f2fbc7bcdd25ae1543a1e3b385acc729758b1978f886d09a121eff15e3873
Parent
95e91b13d28d62c…
1 file changed
+1
-1
+1
-1
| --- src/stat.c | ||
| +++ src/stat.c | ||
| @@ -423,11 +423,11 @@ | ||
| 423 | 423 | if( dbCheck ){ |
| 424 | 424 | if( dbCheck<2 ){ |
| 425 | 425 | char *zRes = db_text(0, "PRAGMA repository.quick_check(1)"); |
| 426 | 426 | fossil_print("%*s%s\n", colWidth, "database-check:", zRes); |
| 427 | 427 | }else{ |
| 428 | - char *newArgv[2]; | |
| 428 | + char *newArgv[3]; | |
| 429 | 429 | newArgv[0] = g.argv[0]; |
| 430 | 430 | newArgv[1] = "test-integrity"; |
| 431 | 431 | newArgv[2] = 0; |
| 432 | 432 | g.argv = newArgv; |
| 433 | 433 | g.argc = 2; |
| 434 | 434 |
| --- src/stat.c | |
| +++ src/stat.c | |
| @@ -423,11 +423,11 @@ | |
| 423 | if( dbCheck ){ |
| 424 | if( dbCheck<2 ){ |
| 425 | char *zRes = db_text(0, "PRAGMA repository.quick_check(1)"); |
| 426 | fossil_print("%*s%s\n", colWidth, "database-check:", zRes); |
| 427 | }else{ |
| 428 | char *newArgv[2]; |
| 429 | newArgv[0] = g.argv[0]; |
| 430 | newArgv[1] = "test-integrity"; |
| 431 | newArgv[2] = 0; |
| 432 | g.argv = newArgv; |
| 433 | g.argc = 2; |
| 434 |
| --- src/stat.c | |
| +++ src/stat.c | |
| @@ -423,11 +423,11 @@ | |
| 423 | if( dbCheck ){ |
| 424 | if( dbCheck<2 ){ |
| 425 | char *zRes = db_text(0, "PRAGMA repository.quick_check(1)"); |
| 426 | fossil_print("%*s%s\n", colWidth, "database-check:", zRes); |
| 427 | }else{ |
| 428 | char *newArgv[3]; |
| 429 | newArgv[0] = g.argv[0]; |
| 430 | newArgv[1] = "test-integrity"; |
| 431 | newArgv[2] = 0; |
| 432 | g.argv = newArgv; |
| 433 | g.argc = 2; |
| 434 |