Commit 5d0c6565 authored by Nick Wellnhofer's avatar Nick Wellnhofer
Browse files

Fix buffer overflow in exsltDateFormat

Long years can overflow a stack-based buffer on 64-bit platforms by
up to four bytes.

Thanks to Nicolas Gregoire for the report.

Fixes bug #765380:
parent 8b90c9a6
......@@ -1283,7 +1283,7 @@ exsltDateFormat (const exsltDateValPtr dt)
if (dt->type & XS_GYEAR) {
xmlChar buf[20], *cur = buf;
xmlChar buf[100], *cur = buf;
FORMAT_GYEAR(dt->, cur);
if (dt->type == XS_GYEARMONTH) {
Supports Markdown
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment