source@mandoc.bsd.lv
 help / color / mirror / Atom feed
* mdocml: fix integer overflows by using reallocarray(3)
@ 2015-05-20 23:01 schwarze
  0 siblings, 0 replies; only message in thread
From: schwarze @ 2015-05-20 23:01 UTC (permalink / raw)
  To: source

Log Message:
-----------
fix integer overflows by using reallocarray(3)

Modified Files:
--------------
    mdocml:
        compat_stringlist.c

Revision Data
-------------
Index: compat_stringlist.c
===================================================================
RCS file: /home/cvs/mdocml/mdocml/compat_stringlist.c,v
retrieving revision 1.2
retrieving revision 1.3
diff -Lcompat_stringlist.c -Lcompat_stringlist.c -u -p -r1.2 -r1.3
--- compat_stringlist.c
+++ compat_stringlist.c
@@ -48,7 +48,7 @@ sl_init(void)
 
 	sl->sl_cur = 0;
 	sl->sl_max = _SL_CHUNKSIZE;
-	sl->sl_str = malloc(sl->sl_max * sizeof(char *));
+	sl->sl_str = reallocarray(NULL, sl->sl_max, sizeof(char *));
 	if (sl->sl_str == NULL)
 		err(1, "stringlist");
 	return sl;
@@ -63,7 +63,8 @@ sl_add(StringList *sl, char *name)
 {
 	if (sl->sl_cur == sl->sl_max - 1) {
 		sl->sl_max += _SL_CHUNKSIZE;
-		sl->sl_str = reallocf(sl->sl_str, sl->sl_max * sizeof(char *));
+		sl->sl_str = reallocarray(sl->sl_str,
+		    sl->sl_max, sizeof(char *));
 		if (sl->sl_str == NULL)
 			return (-1);
 	}
--
 To unsubscribe send an email to source+unsubscribe@mdocml.bsd.lv

^ permalink raw reply	[flat|nested] only message in thread

only message in thread, other threads:[~2015-05-20 23:01 UTC | newest]

Thread overview: (only message) (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2015-05-20 23:01 mdocml: fix integer overflows by using reallocarray(3) schwarze

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).