search

antirez / lua-cmsgpack

A self contained Lua MessagePack C implementation.
355 stars 118 forks source link

Wrong size passed into realloc on delete of buf #41

Open tmiv opened 9 years ago

tmiv commented 9 years ago

In mp_buf_free in file lua_cmsgpack.c line 133 reads mp_realloc(buf->L, buf->b, buf->len, 0); when it should read mp_realloc(buf->L, buf->b, buf->len + buf->free, 0);

realloc is passed the wrong osize. That can be problematic if the implementation of realloc is sensitive to it.

ensonic commented 8 years ago

I think this has been fixed by https://github.com/antirez/lua-cmsgpack/commit/4d94cabed195ef47303f27e286aa0ab8e8f9a144