shaba/libxml2
1
0
Fork 0
mirror of https://gitlab.gnome.org/GNOME/libxml2.git synced 2025-03-24 06:50:08 +03:00
Code

buf: Limit xmlBuffer size to INT_MAX

Browse Source 
Some API functions like xmlBufUse only support ints.
This commit is contained in:
Nick Wellnhofer 2024-07-22 13:02:07 +02:00
parent 6a3c0b0d93
commit 278fcf13b9
1 changed files with 5 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
buf.c
View File

@ -776,7 +776,7 @@ xmlBufferPtr
xmlBufferCreateSize(size_t size) {
xmlBufferPtr ret;
if (size >= UINT_MAX)
if (size >= INT_MAX)
return(NULL);
ret = xmlMalloc(sizeof(*ret));
@ -963,17 +963,17 @@ xmlBufferGrow(xmlBufferPtr buf, unsigned int len) {
if (len < buf->size - buf->use)
return(0);
if (len >= UINT_MAX - buf->use)
if (len >= INT_MAX - buf->use)
return(-1);
if (buf->size > (size_t) len) {
if (buf->size <= UINT_MAX / 2)
if (buf->size <= INT_MAX / 2)
size = buf->size * 2;
else
size = UINT_MAX;
size = INT_MAX;
} else {
size = buf->use + len + 1;
if (size <= UINT_MAX - 100)
if (size <= INT_MAX - 100)
size += 100;
}