diff options
author | Klaus Schmidinger <vdr@tvdr.de> | 2011-03-28 16:30:37 +0200 |
---|---|---|
committer | Klaus Schmidinger <vdr@tvdr.de> | 2011-03-28 16:30:37 +0200 |
commit | 4b8fd4e1afa0ef43049ded0a35d3279f070b6587 (patch) | |
tree | 857d1b00cdc2b4690df6f8887cc1bbe447652a8e /font.c | |
parent | fa85bb7c019b4ac36f73d353a9d384222ccc0bf5 (diff) | |
download | vdr-4b8fd4e1afa0ef43049ded0a35d3279f070b6587.tar.gz vdr-4b8fd4e1afa0ef43049ded0a35d3279f070b6587.tar.bz2 |
Fixed a buffer overflow in cFont::Bidi()
Diffstat (limited to 'font.c')
-rw-r--r-- | font.c | 4 |
1 files changed, 2 insertions, 2 deletions
@@ -6,7 +6,7 @@ * * BiDi support by Osama Alrawab <alrawab@hotmail.com> @2008 Tripoli-Libya. * - * $Id: font.c 2.7 2011/02/26 12:09:18 kls Exp $ + * $Id: font.c 2.8 2011/03/28 16:29:51 kls Exp $ */ #include "font.h" @@ -520,7 +520,7 @@ cString cFont::Bidi(const char *Ltr) bool ok = fribidi_log2vis(Logical, RtlLen, &Base, Visual, NULL, NULL, NULL); if (ok) { fribidi_remove_bidi_marks(Visual, RtlLen, NULL, NULL, NULL); - Rtl = MALLOC(char, RtlLen * 4); + Rtl = MALLOC(char, RtlLen * 4 + 1); fribidi_unicode_to_charset(fribidiCharset, Visual, RtlLen, Rtl); } free(Logical); |