dictionary insert stage count bugfix

2 files changed, 3 insertions, 2 deletions

diff --git a/docs/Changelog.md b/docs/Changelog.md
index 751b051a..23b6ec6a 100644
--- a/docs/Changelog.md
+++ b/docs/Changelog.md
@@ -21,6 +21,7 @@ sending a mail to <afl-users+subscribe@googlegroups.com>.
      - all Python 2+3 versions supported now
      - changed execs_per_sec in fuzzer_stats from "current" execs per second
        (which is pointless) to total execs per second
+     - bugfix for dictionary insert stage count (fix via Google repo PR)
   - afl-clang-fast:
      - show in the help output for which llvm version it was compiled for
      - now does not need to be recompiled between trace-pc and pass
diff --git a/src/afl-fuzz-one.c b/src/afl-fuzz-one.c
index 199b3ea8..c1f3f9ac 100644
--- a/src/afl-fuzz-one.c
+++ b/src/afl-fuzz-one.c
@@ -1474,7 +1474,7 @@ skip_interest:
   stage_name = "user extras (insert)";
   stage_short = "ext_UI";
   stage_cur = 0;
-  stage_max = extras_cnt * len;
+  stage_max = extras_cnt * (len + 1);
 
   orig_hit_cnt = new_hit_cnt;
 
@@ -3492,7 +3492,7 @@ skip_interest:
   stage_name = "user extras (insert)";
   stage_short = "ext_UI";
   stage_cur = 0;
-  stage_max = extras_cnt * len;
+  stage_max = extras_cnt * (len + 1);
 
   orig_hit_cnt = new_hit_cnt;