From 7ceea13e10248841bc2d6ca97aaefbc82a758a88 Mon Sep 17 00:00:00 2001
From: Bill Currie <bill@taniwha.org>
Date: Fri, 21 Sep 2007 10:43:27 +0000
Subject: [PATCH] fix an overflow bug
---
libs/util/dstring.c | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/libs/util/dstring.c b/libs/util/dstring.c
index 9102e5b42..a9c1df348 100644
--- a/libs/util/dstring.c
+++ b/libs/util/dstring.c
@@ -171,7 +171,7 @@ dstring_replace (dstring_t *dstr, unsigned int pos, unsigned int rlen,
unsigned int oldsize = dstr->size;
if (pos > dstr->size)
pos = dstr->size;
- if (pos + rlen > dstr->size)
+ if (rlen > dstr->size - pos)
rlen = dstr->size - pos;
if (rlen < len) {
dstr->size += len - rlen;