[Guile-commits] GNU Guile branch, branch_release-1-8, updated. release_1-8-8-3-g99c6be8

[Andy Wingo]

This is an automated email from the git hooks/post-receive script. It was
generated because a ref change was pushed to the repository containing
the project "GNU Guile".

http://git.savannah.gnu.org/cgit/guile.git/commit/?id=99c6be814f06952e228b1610407faa9161a65cdf

The branch, branch_release-1-8 has been updated
       via  99c6be814f06952e228b1610407faa9161a65cdf (commit)
      from  b720f244942320731e1ceb67f3648143a3316b32 (commit)

Those revisions listed above that are new to this repository have
not appeared on any other notification email; so we list those
revisions in full, below.

- Log -----------------------------------------------------------------
commit 99c6be814f06952e228b1610407faa9161a65cdf
Author: Andy Wingo <address@hidden>
Date:   Fri Jul 29 09:31:32 2011 +0200

    fix write-beyond-end of an on-stack buffer while reading typed arrays
    
    * libguile/unif.c (scm_i_read_array): Fix case in which we could write
      beyond the end of `tag'.  See
      http://article.gmane.org/gmane.lisp.guile.devel/12685.

-----------------------------------------------------------------------

Summary of changes:
 libguile/unif.c |    4 ++--
 1 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/libguile/unif.c b/libguile/unif.c
index daf0850..dd4e617 100644
--- a/libguile/unif.c
+++ b/libguile/unif.c
@@ -1,4 +1,4 @@
-/* Copyright (C) 1995,1996,1997,1998,2000,2001,2002,2003,2004, 2005, 2006 Free 
Software Foundation, Inc.
+/* Copyright (C) 1995,1996,1997,1998,2000,2001,2002,2003,2004, 2005, 2006, 
2011 Free Software Foundation, Inc.
  * 
  * This library is free software; you can redistribute it and/or
  * modify it under the terms of the GNU Lesser General Public
@@ -2722,7 +2722,7 @@ scm_i_read_array (SCM port, int c)
    */
   tag_len = 0;
  continue_reading_tag:
-  while (c != EOF && c != '(' && c != '@' && c != ':' && tag_len < 80)
+  while (c != EOF && c != '(' && c != '@' && c != ':' && tag_len < 79)
     {
       tag[tag_len++] = c;
       c = scm_getc (port);


hooks/post-receive
-- 
GNU Guile