From: Martin Koegler Date: Wed, 16 Aug 2017 20:16:22 GMT Subject: [Patch size_t V3 10/19] Add overflow check to get_delta_hdr_size Message-ID: <1502914591-26215-11-git-send-email-martin@mail.zuhause> In-Reply-To: <1502914591-26215-1-git-send-email-martin@mail.zuhause> From: Martin Koegler Signed-off-by: Martin Koegler --- delta.h | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/delta.h b/delta.h index 2df0f55..dab7352 100644 --- a/delta.h +++ b/delta.h @@ -96,6 +96,11 @@ static inline size_t get_delta_hdr_size(const unsigned char **datap, cmd = *data++; size |= (cmd & 0x7f) << i; i += 7; + if (bitsizeof(size_t) <= i) { + die("too large object size"); + size = 0; + break; + } } while (cmd & 0x80 && data < top); *datap = data; return size; -- 2.1.4