Fix reading rpmtd behind its size in formatValue() (rhbz:1316896)

When it is read from index higher than size of rpmtd, return "(none)".
rpm-software-management · Apr 25, 2016 · b722cf8 · b722cf8
1 parent eb632e5
commit b722cf8
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/lib/headerfmt.c b/lib/headerfmt.c
@@ -623,7 +623,7 @@ static char * formatValue(headerSprintfArgs hsa, sprintfTag tag, int element)
     char * t, * te;
     rpmtd td;
 
-    if ((td = getData(hsa, tag->tag))) {
+    if ((td = getData(hsa, tag->tag)) && td->count > element) {
 	td->ix = element; /* Ick, use iterators instead */
 	val = tag->fmt(td);
     } else {