Urgent help regarding the buffer overflow

Hello,
        There is a buffer overflow vulnerability reported(buffer length
computation bug). Can you please explain 
* Where actually the buffer length is not updated consistently.
* Why are we introducing another pointer instead of updating the buffer
length consistently?
        Please mail me immediately. Itz very urgent.

Thanks,
Vani.