comparison mercurial/mpatch.c @ 28656:b6ed2505d6cf stable

parsers: fix list sizing rounding error (SEC)

CVE-2016-3630 (1/2)

This addresses part of a vulnerability in application of binary
deltas.

28632:a2c2dd399f3b

	struct flist *l;
	struct frag *lt;
	int pos = 0;

	/* assume worst case size, we won't have many of these lists */
	l = lalloc(len / 12);
	if (!l)
		return NULL;

	lt = l->tail;

28656:b6ed2505d6cf

	struct flist *l;
	struct frag *lt;
	int pos = 0;

	/* assume worst case size, we won't have many of these lists */
	l = lalloc(len / 12 + 1);
	if (!l)
		return NULL;

	lt = l->tail;