commit 28c5d46d844684feba2ddfc9027ea308d8d3612c
author Rich Felker <dalias@aerifal.cx> Mon Apr 30 02:56:47 2012 -0400
committer Rich Felker <dalias@aerifal.cx> Mon Apr 30 02:56:47 2012 -0400
tree fe917ab695dfae3277ef197376d769fb43a0a107
parent e5a9b50e973aadff2e6303d01be8807b1fb9c325

fix off-by-one error that caused uninitialized memory read in floatscan

this caused misreading of certain floating point values that are exact
multiples of large powers of ten, unpredictable depending on prior
stack contents.

src/internal/floatscan.c

diff --git a/src/internal/floatscan.c b/src/internal/floatscan.c
index f80db38..4b335f5 100644
--- a/src/internal/floatscan.c
+++ b/src/internal/floatscan.c
@@ -244,7 +244,7 @@
 
 	/* Assemble desired bits into floating point variable */
 	for (y=i=0; i<LD_B1B_DIG; i++) {
-		if ((a+i & MASK)==z) x[z=(z+1 & MASK)] = 0;
+		if ((a+i & MASK)==z) x[(z=(z+1 & MASK))-1] = 0;
 		y = 1000000000.0L * y + x[a+i & MASK];
 	}