try to avoid integer overflow. CID #1445226

FreeRADIUS · May 24, 2019 · adf43f6 · adf43f6
1 parent d944175
commit adf43f6
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/src/modules/rlm_isc_dhcp/rlm_isc_dhcp.c b/src/modules/rlm_isc_dhcp/rlm_isc_dhcp.c
@@ -226,7 +226,7 @@ static int refill(rlm_isc_dhcp_tokenizer_t *state)
 	state->lineno++;
 	state->line = state->ptr;
 
-	if (!fgets(state->ptr, (state->buffer + state->bufsize) - state->ptr, state->fp)) {
+	if (!fgets(state->ptr, state->bufsize - (state->ptr - state->buffer), state->fp)) {
 		if (feof(state->fp)) {
 			state->eof = true;
 			return 0;