From 28c5d46d844684feba2ddfc9027ea308d8d3612c Mon Sep 17 00:00:00 2001
From: Rich Felker <dalias@aerifal.cx>
Date: Mon, 30 Apr 2012 02:56:47 -0400
Subject: fix off-by-one error that caused uninitialized memory read in
 floatscan

this caused misreading of certain floating point values that are exact
multiples of large powers of ten, unpredictable depending on prior
stack contents.
---
 src/internal/floatscan.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to 'src/internal')

diff --git a/src/internal/floatscan.c b/src/internal/floatscan.c
index f80db383..4b335f5c 100644
--- a/src/internal/floatscan.c
+++ b/src/internal/floatscan.c
@@ -244,7 +244,7 @@ static long double decfloat(FILE *f, int c, int bits, int emin, int sign, int po
 
 	/* Assemble desired bits into floating point variable */
 	for (y=i=0; i<LD_B1B_DIG; i++) {
-		if ((a+i & MASK)==z) x[z=(z+1 & MASK)] = 0;
+		if ((a+i & MASK)==z) x[(z=(z+1 & MASK))-1] = 0;
 		y = 1000000000.0L * y + x[a+i & MASK];
 	}
 
-- 
cgit v1.2.1