<<< Date Index >>>     <<< Thread Index >>>

Re: [Mutt] #3017: change-folder: tab-completion results in "Out of

#3017: change-folder: tab-completion results in "Out of memory!", return value 
= 1
if many files for the menu

Comment (by vinc17):

 This may be due to an integer overflow. In browser.h:
 {{{
 struct browser_state
 {
   struct folder_file *entry;
   short entrylen; /* number of real entries */
   short entrymax;  /* max entry */
 [...]
 }}}
 These two short's should be int's (or long's). In browser.c:
 {{{
     safe_realloc (&state->entry,
                   sizeof (struct folder_file) * (state->entrymax += 256));
 }}}
 Possible integer overflow on state->entrymax.

-- 
Ticket URL: <http://dev.mutt.org/trac/ticket/3017#comment:3>