Urgent help regarding the buffer overflow

["Vani V - CTD, Chennai." <vaniv%ctd.hcltech.com@localhost>]

Hello,
        There is a buffer overflow vulnerability reported(buffer length
computation bug). Can you please explain 
* Where actually the buffer length is not updated consistently.
* Why are we introducing another pointer instead of updating the buffer
length consistently?
        Please mail me immediately. Itz very urgent.

Thanks,
Vani.