GithubStar/mpv
1
0
Fork 0
mirror of https://github.com/mpv-player/mpv.git synced 2026-10-28 23:13:18 +08:00
Code Issues Packages Projects Releases Wiki Activity

Check for integer overflow in grow_array.

Browse Source 
git-svn-id: svn://svn.mplayerhq.hu/mplayer/trunk@29736 b3059339-0415-0410-9bf9-f77b7e298cf2
This commit is contained in:
reimar
2009-09-30 07:41:00 +00:00
parent aa576e8fc0
commit eb5571e57e
1 changed files with 4 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
libmpdemux/demux_mkv.c
+4 -1
View File
@@ -213,7 +213,10 @@ static void grow_array(void *arrayp, int nelem, size_t elsize) {
void *oldp = *array;
if (nelem & 31)
return;
*array = realloc(*array, (nelem + 32) * elsize);
if (nelem > UINT_MAX / elsize - 32)
*array = NULL;
else
*array = realloc(*array, (nelem + 32) * elsize);
if (!*array)
free(oldp);
}