Fix an overflow if MONO_ZERO_LEN_ARRAY is not 0. Fixes mono#13233.

midnite8177 · Jul 18, 2013 · ff23e80 · ff23e80
1 parent e19fa79
commit ff23e80
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/mono/mini/mini.c b/mono/mini/mini.c
@@ -3759,7 +3759,7 @@ mono_save_seq_point_info (MonoCompile *cfg)
 	if (!cfg->seq_points)
 		return;
 
-	info = g_malloc0 (sizeof (MonoSeqPointInfo) + (cfg->seq_points->len - MONO_ZERO_LEN_ARRAY) * sizeof (SeqPoint));
+	info = g_malloc0 (sizeof (MonoSeqPointInfo) + (cfg->seq_points->len * sizeof (SeqPoint)));
 	info->len = cfg->seq_points->len;
 	for (i = 0; i < cfg->seq_points->len; ++i) {
 		SeqPoint *sp = &info->seq_points [i];