diff options
| author | Akira Hatanaka <ahatanaka@apple.com> | 2016-06-29 15:26:13 +0000 |
|---|---|---|
| committer | Akira Hatanaka <ahatanaka@apple.com> | 2016-06-29 15:26:13 +0000 |
| commit | 2556b769ecfcffd4d279c28b60e36ea6d2a434ac (patch) | |
| tree | 8bfa66daa2f63980d62afdb074107e25eb5689f5 /libcxx/src/strstream.cpp | |
| parent | 832d0420781083009f758e01f1df59e4a00003b9 (diff) | |
| download | bcm5719-llvm-2556b769ecfcffd4d279c28b60e36ea6d2a434ac.tar.gz bcm5719-llvm-2556b769ecfcffd4d279c28b60e36ea6d2a434ac.zip | |
[libcxx] Fix a bug in strstreambuf::overflow.
The end pointer should point to one past the end of the newly allocated
buffer.
rdar://problem/24265174
Differential Revision: http://reviews.llvm.org/D20334
llvm-svn: 274132
Diffstat (limited to 'libcxx/src/strstream.cpp')
| -rw-r--r-- | libcxx/src/strstream.cpp | 3 |
1 files changed, 1 insertions, 2 deletions
diff --git a/libcxx/src/strstream.cpp b/libcxx/src/strstream.cpp index 83702fc72e8..0e2d7ff21bb 100644 --- a/libcxx/src/strstream.cpp +++ b/libcxx/src/strstream.cpp @@ -175,7 +175,6 @@ strstreambuf::overflow(int_type __c) ptrdiff_t ninp = gptr() - eback(); ptrdiff_t einp = egptr() - eback(); ptrdiff_t nout = pptr() - pbase(); - ptrdiff_t eout = epptr() - pbase(); if (__strmode_ & __allocated) { if (__pfree_) @@ -184,7 +183,7 @@ strstreambuf::overflow(int_type __c) delete [] eback(); } setg(buf, buf + ninp, buf + einp); - setp(buf + einp, buf + einp + eout); + setp(buf + einp, buf + new_size); pbump(static_cast<int>(nout)); __strmode_ |= __allocated; } |
