Fix an overflow issue with ArrayInsert[Before|After] (bug 4330, r=joropito)

Former-commit-id: ba56af8a7132de17e42412bd33c1958353711e60
This commit is contained in:
Vincent HERBET 2013-06-22 12:34:38 +02:00
parent e5864c5abf
commit 38fb271c83

View File

@ -232,7 +232,7 @@ public:
} }
// Allocate a temporary buffer to store data in // Allocate a temporary buffer to store data in
size_t tempbuffsize=(sizeof(cell) * cellcount) * (this->count - which); size_t tempbuffsize=(sizeof(cell) * cellcount) * (this->count - 1 - which);
cell* temp=(cell*)malloc(tempbuffsize); cell* temp=(cell*)malloc(tempbuffsize);