From f6aa2200f2fb4f4d4bb51e67d68e86aabcac0c4b Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Roland=20=22Test-tools=22=20B=C3=A4r?=
 <roland@verifysoft.de>
Date: Mon, 6 Aug 2007 12:37:52 -0700
Subject: [PATCH] Probable off by one buffer overflow in
 .../xorgconfig/xorgconfig.c

X.Org Bug #11858 <http://bugs.freedesktop.org/show_bug.cgi?id=11858>
Patch #11005 <http://bugs.freedesktop.org/attachment.cgi?id=11005>
---
 hw/xfree86/utils/xorgconfig/xorgconfig.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/hw/xfree86/utils/xorgconfig/xorgconfig.c b/hw/xfree86/utils/xorgconfig/xorgconfig.c
index 736b01183..8d9c03f5d 100644
--- a/hw/xfree86/utils/xorgconfig/xorgconfig.c
+++ b/hw/xfree86/utils/xorgconfig/xorgconfig.c
@@ -2442,7 +2442,7 @@ write_fontpath_section(FILE *f)
 		len = nextdir - thisdir;
 		nextdir++;
 	    }
-	    if (len > sizeof(cur))
+	    if (len >= sizeof(cur))
 		continue;
 	    strncpy(cur, thisdir, len);
 	    cur[len] = '\0';