Fix an overflow issue with ArrayInsert[Before|After] (bug 4330, r=joropito)

This commit is contained in:
Vincent HERBET 2013-06-22 12:34:38 +02:00
parent cf7b8645fa
commit ba56af8a71

View File

@ -232,7 +232,7 @@ public:
} }
// Allocate a temporary buffer to store data in // Allocate a temporary buffer to store data in
size_t tempbuffsize=(sizeof(cell) * cellcount) * (this->count - which); size_t tempbuffsize=(sizeof(cell) * cellcount) * (this->count - 1 - which);
cell* temp=(cell*)malloc(tempbuffsize); cell* temp=(cell*)malloc(tempbuffsize);