mirror/libowfat
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

SECURITY: fix botched integer overflow handling logic in stralloc_ready (Giorgio)

Browse Source
This commit is contained in:
leitner 2015-04-09 18:23:23 +00:00
parent d0e735e2c2
commit 79f534ffdf
2 changed files with 3 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
CHANGES
View File

@ -28,6 +28,7 @@
zero length buffer
if SOCK_NONBLOCK is defined, use it instead of socket+fcntl
... but if errno==EINVAL still fall back to socket+fcntl (Robert Henney)
SECURITY: fix botched integer overflow handling logic in stralloc_ready (Giorgio)
0.29:
save 8 bytes in taia.h for 64-bit systems

3
stralloc/stralloc_ready.c
View File

@ -9,7 +9,8 @@
* old space, and returns 1. Note that this changes sa.s. */
int stralloc_ready(stralloc *sa,size_t len) {
register size_t wanted=len+(len>>3)+30; /* heuristic from djb */
if (wanted<len || !sa->s || sa->a<len) {
if (wanted<len) wanted=len;
if (!sa->s || sa->a<len) {
register char* tmp;
if (!(tmp=realloc(sa->s,wanted)))
return 0;