[avrdude-dev] [bug #48776] avrdude attempts to free() an invalid address

[KārlisSeņko]

Follow-up Comment #5, bug #48776 (project avrdude):

Here is a patch I use.

Index: avrdude/usbtiny.c
===================================================================
--- avrdude/usbtiny.c   (revision 1395)
+++ avrdude/usbtiny.c   (working copy)
@@ -455,6 +455,10 @@
 
   for (; addr < maxaddr; addr += chunk) {
     chunk = PDATA(pgm)->chunk_size;         // start with the maximum chunk
size possible
+    
+    if (chunk > maxaddr - addr) {
+        chunk = maxaddr - addr;
+    }
 
     // Send the chunk of data to the USBtiny with the function we want
     // to perform
@@ -510,6 +514,10 @@
   for (; addr < maxaddr; addr += chunk) {
     // start with the max chunk size
     chunk = PDATA(pgm)->chunk_size;
+    
+    if (chunk > maxaddr - addr) {
+        chunk = maxaddr - addr;
+    }
 
     // we can only write a page at a time anyways
     if (m->paged && chunk > page_size)


    _______________________________________________________

Reply to this item at:

  <http://savannah.nongnu.org/bugs/?48776>

_______________________________________________
  Message sent via/by Savannah
  http://savannah.nongnu.org/