[or-cvs] [tor/master 8/9] fix an impossible-to-actually-trigger overflow in descriptor generation

[arma at torproject.org]

Author: Roger Dingledine <arma at torproject.org>
Date: Fri, 15 Jan 2010 15:55:08 -0500
Subject: fix an impossible-to-actually-trigger overflow in descriptor generation
Commit: f1d74f611d57ab87f8e408aa23a73fd9552e95c9

---
 src/or/rephist.c |    2 +-
 1 files changed, 1 insertions(+), 1 deletions(-)

diff --git a/src/or/rephist.c b/src/or/rephist.c
index 7f71dc0..e606db3 100644
--- a/src/or/rephist.c
+++ b/src/or/rephist.c
@@ -1613,7 +1613,7 @@ rep_hist_get_bandwidth_lines(int for_extrainfo)
   size_t len;
 
   /* opt (read|write)-history yyyy-mm-dd HH:MM:SS (n s) n,n,n,n,n... */
-  len = (60+20*NUM_TOTALS)*2;
+  len = (60+21*NUM_TOTALS)*2;
   buf = tor_malloc_zero(len);
   cp = buf;
   for (r=0;r<2;++r) {
-- 
1.6.5