* buffer.c: Memory overflow fixes.

(overlays_at, overlays_in, record_overlay_string, overlay_strings):
Don't update size of array until after memory allocation succeeds,
because xmalloc/xrealloc may not return.

1 files changed, 5 insertions, 0 deletions

diff --git a/src/ChangeLog b/src/ChangeLog
index 0d5b41ea205..ff5dfc09330 100644
--- a/src/ChangeLog
+++ b/src/ChangeLog
@@ -1,5 +1,10 @@
 2011-07-28  Paul Eggert  <eggert@cs.ucla.edu>
 
+        * buffer.c: Memory overflow fixes.
+        (overlays_at, overlays_in, record_overlay_string, overlay_strings):
+        Don't update size of array until after memory allocation succeeds,
+        because xmalloc/xrealloc may not return.
+
         * bidi.c: Integer overflow fix.
         (bidi_shelve_header_size): New constant.
         (bidi_cache_ensure_space, bidi_shelve_cache): Use it.