Commit Diff

Commit:
ada24b4005504a9cc8035987cf5175940ae568a7
From:
Russ Cox <rsc@swtch.com>
Date:
Message:
misc: array bounds fixes that gcc finds (John Gosset)
Actions:
Patch | Tree
commit - 77809fb0cc7c9ff07f0ecd319240c8e3ee2c9528
commit + ada24b4005504a9cc8035987cf5175940ae568a7
blob - 518c6b947c1c12de0a021047682a5e99eeffb65a
blob + 677fe19291ab12d815be8a304dd43cf1ffc38503
--- src/cmd/eqn/main.c
+++ src/cmd/eqn/main.c
@@ -7,7 +7,7 @@
 
 char *version = "version Oct 24, 1991";
 
-char	in[MAXLINE];	/* input buffer */
+char	in[MAXLINE+1];	/* input buffer */
 int	noeqn;
 char	*cmdname;
 
blob - 22a0b68cf071bb4e8b6542f76ca1709479ef0041
blob + 22365669ad0adb7ec2453a4f548a52f07db4c1fb
--- src/cmd/jpg/readgif.c
+++ src/cmd/jpg/readgif.c
@@ -351,11 +351,8 @@ skipextension(Header *h)
 	}
 	if(hsize>0 && Bread(h->fd, h->buf, hsize) != hsize)
 		giferror(h, extreaderr);
-	if(!hasdata){
-		if(h->buf[hsize-1] != 0)
-			giferror(h, "ReadGIF: bad extension format");
+	if(!hasdata)
 		return;
-	}
 
 	/* loop counter: Application Extension with NETSCAPE2.0 as string and 1 <loop.count> in data */
 	if(type == 0xFF && hsize==11 && memcmp(h->buf, "NETSCAPE2.0", 11)==0){
blob - adccd590225fe98aa7ef24526316ce5c2b7a3833
blob + 1d917f82c877b7712f068f4918196fcd17bc87de
--- src/cmd/tapefs/32vfs.c
+++ src/cmd/tapefs/32vfs.c
@@ -93,7 +93,7 @@ popdir(Ram *r)
 			continue;
 		f = iget(ino);
 		strncpy(name, dp->name, VNAMELEN);
-		name[VNAMELEN+1] = '\0';
+		name[VNAMELEN] = '\0';
 		f.name = name;
 		popfile(r, f);
 	}
blob - a2f546cd2fc45be8a4b4d20edc334e86c9ca5f7f
blob + c2875b845a21a8706c46b36a23e0b3fb59b248e4
--- src/cmd/tapefs/v10fs.c
+++ src/cmd/tapefs/v10fs.c
@@ -84,7 +84,7 @@ popdir(Ram *r)
 			continue;
 		f = iget(ino);
 		strncpy(name, dp->name, VNAMELEN);
-		name[VNAMELEN+1] = '\0';
+		name[VNAMELEN] = '\0';
 		f.name = name;
 		popfile(r, f);
 	}
blob - 648c21282d7486af522f074188154b9eddadf4db
blob + 74c6737c7e6f70c25769216648d567ad2ddf5c7d
--- src/cmd/tapefs/v6fs.c
+++ src/cmd/tapefs/v6fs.c
@@ -85,7 +85,7 @@ popdir(Ram *r)
 			continue;
 		f = iget(ino);
 		strncpy(name, dp->name, V6NAMELEN);
-		name[V6NAMELEN+1] = '\0';
+		name[V6NAMELEN] = '\0';
 		f.name = name;
 		popfile(r, f);
 	}
blob - 38090eac74bc7a80bf82c9c16f8c660b8db99aad
blob + b037bdda3d49d0c679a8f5d0ead5d6b8508903dc
--- src/cmd/troff/t10.c
+++ src/cmd/troff/t10.c
@@ -75,7 +75,7 @@ void t_ptinit(void)
 	ics = EM;	/* insertion character space */
 	for (i = 0; i < (NTAB - 1) && DTAB * (i + 1) < TABMASK; i++)
 		tabtab[i] = DTAB * (i + 1);
-	tabtab[NTAB] = 0;
+	tabtab[NTAB-1] = 0;
 	pl = 11 * INCH;			/* paper length */
 	po = PO;		/* page offset */
 	spacesz = SS;