fix an overflow bug

This commit is contained in:
Bill Currie 2007-09-21 10:43:27 +00:00 committed by Jeff Teunissen
parent e38bf6dd98
commit 7ceea13e10

View file

@ -171,7 +171,7 @@ dstring_replace (dstring_t *dstr, unsigned int pos, unsigned int rlen,
unsigned int oldsize = dstr->size;
if (pos > dstr->size)
pos = dstr->size;
if (pos + rlen > dstr->size)
if (rlen > dstr->size - pos)
rlen = dstr->size - pos;
if (rlen < len) {
dstr->size += len - rlen;