storm/w3m
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Prevent unintentional integer overflow in Strgrow

Browse Source 
Bug-Chromium: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31467
This commit is contained in:
Tatsuya Kinoshita committed 2021-02-28 16:16:06 +09:00
1 parent 1c6819f329
commit f37f074cdf
1 file changed
+1 -1
Download Patch File Download Diff File Expand all files Collapse all files
Str.c
+1 -1
View File
@@ -256,7 +256,7 @@ Strgrow(Str x)
{ {
char *old = x->ptr; char *old = x->ptr;
int newlen; int newlen;
newlen = x->area_size * 6 / 5; newlen = x->area_size + x->area_size / 5;
if (newlen == x->area_size) if (newlen == x->area_size)
newlen += 2; newlen += 2;
if (newlen < 0 || newlen > STR_SIZE_MAX) { if (newlen < 0 || newlen > STR_SIZE_MAX) {