diff options
| author | Mike Frysinger <vapier@gentoo.org> | 2009-10-15 19:47:12 -0400 |
|---|---|---|
| committer | Mike Frysinger <vapier@gentoo.org> | 2009-10-15 19:47:12 -0400 |
| commit | 07e0ce9fa7f428720bee9decb5d0bb368108d93f (patch) | |
| tree | f5b9628791c8b698b5b1f6901971aef7829f882c /libc/stdio/ferror_unlocked.c | |
| parent | 3729a87541cdc87e5d1de09f49f39c0eec83a89f (diff) | |
malloc: handle size overflows in realloc()
The malloc() code checks the incoming size to make sure the header
adjustment doesn't cause overflow in the size storage. Add the same
check to realloc() to catch stupid stuff like realloc(..., -1).
Reported-by: James Coleman <james.coleman@ubicom.com>
Signed-off-by: Mike Frysinger <vapier@gentoo.org>
Diffstat (limited to 'libc/stdio/ferror_unlocked.c')
0 files changed, 0 insertions, 0 deletions