]> granicus.if.org Git - onig/commitdiff
fix loose malloc() size
authorK.Kosako <kosako@sofnec.co.jp>
Tue, 1 Oct 2019 00:06:27 +0000 (09:06 +0900)
committerK.Kosako <kosako@sofnec.co.jp>
Tue, 1 Oct 2019 00:06:27 +0000 (09:06 +0900)
harnesses/deluxe-encode-harness.c
harnesses/syntax-harness.c

index dde0d1a50e2fc6fd17534ae789fb9c1d91f10eaa..aabe9167077af5bec470b9385bdf31dfbe46e41f 100644 (file)
@@ -163,15 +163,13 @@ int LLVMFuzzerTestOneInput(const uint8_t * Data, size_t Size)
   remaining_size--;
 
   // copy first PATTERN_SIZE bytes off to be the pattern
-  pattern = (unsigned char *)malloc(PATTERN_SIZE+4);
-  memset(pattern, 0, PATTERN_SIZE+4);
+  pattern = (unsigned char *)malloc(PATTERN_SIZE);
   memcpy(pattern, data, PATTERN_SIZE);
   pattern_end = pattern + PATTERN_SIZE;
   data += PATTERN_SIZE;
   remaining_size -= PATTERN_SIZE;
 
-  str = (unsigned char*)malloc(remaining_size+4);
-  memset(str, 0, remaining_size+4);
+  str = (unsigned char*)malloc(remaining_size);
   memcpy(str, data, remaining_size);
   str_end = str + remaining_size;
 
index 50f154df30ab5a6744fc6637318e9964249e004d..4ea0bc9dde8055e1ab1a63f1032c20eb281ce8ae 100644 (file)
@@ -79,14 +79,12 @@ int LLVMFuzzerTestOneInput(const uint8_t * Data, size_t Size)
   remaining_size--;
 
   // copy first PATTERN_SIZE bytes off to be the pattern
-  unsigned char *pattern = (unsigned char *)malloc(PATTERN_SIZE+1);
-  memset(pattern, 0, PATTERN_SIZE+1);
+  unsigned char *pattern = (unsigned char *)malloc(PATTERN_SIZE);
   memcpy(pattern, data, PATTERN_SIZE);
   data += PATTERN_SIZE;
   remaining_size -= PATTERN_SIZE;
 
-  unsigned char *str = (unsigned char*)malloc(remaining_size+1);
-  memset(str, 0, remaining_size+1);
+  unsigned char *str = (unsigned char*)malloc(remaining_size);
   memcpy(str, data, remaining_size);
   
   OnigEncoding use_encs[] = { ONIG_ENCODING_ASCII };