summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorHwankyu Jhun <h.jhun@samsung.com>2019-01-18 10:57:52 +0900
committerHwankyu Jhun <h.jhun@samsung.com>2019-01-18 10:58:27 +0900
commit76b7d27db704b04dd1e845a839bf68dc2a850317 (patch)
treeae3d4985533169e06e24a5e692fc917cc326aed6
parent377e33b6b1ee485c10ee41e57e0a47f323079bd9 (diff)
downloadbundle-76b7d27db704b04dd1e845a839bf68dc2a850317.tar.gz
bundle-76b7d27db704b04dd1e845a839bf68dc2a850317.tar.bz2
bundle-76b7d27db704b04dd1e845a839bf68dc2a850317.zip
Prevent buffer overflow
Change-Id: I6f56d3449c1c9d246bbbe6f80d6e9102d9a4e1eb Signed-off-by: Hwankyu Jhun <h.jhun@samsung.com>
-rwxr-xr-xsrc/keyval_array.c3
1 files changed, 3 insertions, 0 deletions
diff --git a/src/keyval_array.c b/src/keyval_array.c
index 225b02a..a9087c5 100755
--- a/src/keyval_array.c
+++ b/src/keyval_array.c
@@ -408,6 +408,9 @@ size_t keyval_array_decode(void *byte, keyval_array_t **kva, size_t byte_size)
byte_size -= sz_len;
p += sz_len;
+ if ((sizeof(size_t) * len) < len)
+ return 0;
+
if (byte_size < (sizeof(size_t) * len))
return 0;