From bf0ea9ea9efb05be1e6cbb23574b001fd0372b79 Mon Sep 17 00:00:00 2001 From: Sunil Nimmagadda Date: Wed, 27 Aug 2014 10:35:33 +0500 Subject: Bounds check array index. Fixes a crash when len == 1. --- session.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'session.c') diff --git a/session.c b/session.c index 025105e..da90c78 100644 --- a/session.c +++ b/session.c @@ -708,7 +708,7 @@ session_write(struct session *s, const char *data, size_t len) if (data[len - 1] == '\n') len -= 1; - if (data[len - 1] == '\r') + if (len && data[len - 1] == '\r') len -= 1; /* byte stuff "." if at beginning of line */ -- cgit v1.2.3