c/libxml2
1
0
Fork 0
mirror of https://gitlab.gnome.org/GNOME/libxml2 synced 2025-03-28 21:33:13 +00:00
Code Issues Packages Projects Releases Wiki Activity

catalog: Check reallocations for overflow

Browse Source
This commit is contained in:
Nick Wellnhofer 2024-12-15 21:32:36 +01:00
parent 509d498127
commit 1c51f3d3f1
1 changed files with 13 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

16
catalog.c
View File

@ -40,6 +40,7 @@
#include "private/cata.h"
#include "private/buf.h"
#include "private/error.h"
#include "private/memory.h"
#include "private/threads.h"
#define MAX_DELEGATE 50
@ -2128,7 +2129,7 @@ xmlParseSGMLCatalogComment(const xmlChar *cur) {
*/
static const xmlChar *
xmlParseSGMLCatalogPubid(const xmlChar *cur, xmlChar **id) {
xmlChar *buf = NULL, *tmp;
xmlChar *buf = NULL;
int len = 0;
int size = 50;
xmlChar stop;
@ -2155,14 +2156,23 @@ xmlParseSGMLCatalogPubid(const xmlChar *cur, xmlChar **id) {
if ((stop == ' ') && (IS_BLANK_CH(*cur)))
break;
if (len + 1 >= size) {
size *= 2;
tmp = (xmlChar *) xmlRealloc(buf, size);
xmlChar *tmp;
int newSize;
newSize = xmlGrowCapacity(size, 1, 1, XML_MAX_ITEMS);
if (newSize < 0) {
xmlCatalogErrMemory();
xmlFree(buf);
return(NULL);
}
tmp = xmlRealloc(buf, newSize);
if (tmp == NULL) {
xmlCatalogErrMemory();
xmlFree(buf);
return(NULL);
}
buf = tmp;
size = newSize;
}
buf[len++] = *cur;
NEXT;