Commit 3ac0c7d8 authored by unknown's avatar unknown
Browse files

memory overflow in replace.c fixed

parent ad3d7a21

extra/replace.c

+2 −1
Original line number Diff line number Diff line
@@ -279,6 +279,8 @@ int insert_pointer_name(reg1 POINTER_ARRAY *pa,my_string name) 
  length=(uint) strlen(name)+1;

  if (pa->length+length >= pa->max_length)

  {

    pa->max_length=(pa->length+length+MALLOC_OVERHEAD+PS_MALLOC-1)/PS_MALLOC;

    pa->max_length=pa->max_length*PS_MALLOC-MALLOC_OVERHEAD;

    if (!(new_pos= (byte*) my_realloc((gptr) pa->str,

				      (uint) (pa->max_length+PS_MALLOC),

				      MYF(MY_WME))))
@@ -291,7 +293,6 @@ int insert_pointer_name(reg1 POINTER_ARRAY *pa,my_string name) 
					      char*);

      pa->str=new_pos;

    }

    pa->max_length+=PS_MALLOC;

  }

  if (pa->typelib.count >= pa->max_count-1)

  {