Merge pull request #5714 from Dhanu-dynamic/sixel-print-add-nul

Fix off-by-one buffer growth in sixel_print_add
This commit is contained in:
Nicholas Marriott
2026-10-12 13:38:40 +01:00
committed by GitHub

View File

@@ -481,7 +481,7 @@ static void
sixel_print_add(char **buf, size_t *len, size_t *used, const char *s,
size_t slen)
{
while (*used + slen >= *len + 1) {
while (*used + slen + 1 > *len) {
*buf = xreallocarray(*buf, 2, *len);
(*len) *= 2;
}