# HG changeset patch # User Florian Weimer <fweimer@redhat.com> # Date 1391474881 28800 # Mon Feb 03 16:48:01 2014 -0800 # Node ID 633b17bd65f41398b755204c7b1b51e3deaf86e2 # Parent 2e633180df14a1245628a9fc9b2bb7711b59cfd0 yaml_stack_extend: guard against integer overflow diff --git a/src/api.c b/src/api.c --- a/src/api.c +++ b/src/api.c @@ -117,7 +117,12 @@ YAML_DECLARE(int) yaml_stack_extend(void **start, void **top, void **end) { - void *new_start = yaml_realloc(*start, ((char *)*end - (char *)*start)*2); + void *new_start; + + if ((char *)*end - (char *)*start >= INT_MAX / 2) + return 0; + + new_start = yaml_realloc(*start, ((char *)*end - (char *)*start)*2); if (!new_start) return 0;