Fix buffer overflow due to wrong calculation of pointer buffer.

diff --git a/cmd/tools/dijkstra.c b/cmd/tools/dijkstra.c
index 06c711ed58c18f6c15893d4447b2e8c9f906885d..13b7c40d5aa86631199104b9826153f1d7391c49 100644 (file)
--- a/cmd/tools/dijkstra.c
+++ b/cmd/tools/dijkstra.c
@@ -276,8 +276,8 @@ static void init(int argc, char *argv[])
        fprintf(stderr, "%s: no node specified\n", CmdName);
        usage(1);
     }
-    Files = malloc(sizeof(char *) * argc / 2 + 2);
-    Nodes = malloc(sizeof(char *) * argc / 2 + 2);
+    Files = malloc(sizeof(char *) * (argc / 2 + 2));
+    Nodes = malloc(sizeof(char *) * (argc / 2 + 2));
     for (j = i = 0; i < argc; i++) {
        Nodes[j] = argv[i++];
        Files[j] = (argv[i] ? argv[i] : "-");