[PATCH 3/4] Fix integer overflow in unpack_sha1_rest()
From: Ilari Liusvaara <hidden>
Date: 2016-06-15 22:48:06
Subsystem:
the rest · Maintainer:
Linus Torvalds
Signed-off-by: Ilari Liusvaara <redacted> --- sha1_file.c | 2 +- 1 files changed, 1 insertions(+), 1 deletions(-)
diff --git a/sha1_file.c b/sha1_file.c
index 12478a3..39f0844 100644
--- a/sha1_file.c
+++ b/sha1_file.c@@ -1166,7 +1166,7 @@ static int unpack_sha1_header(z_stream *stream, unsigned char *map, unsigned lon static void *unpack_sha1_rest(z_stream *stream, void *buffer, unsigned long size, const unsigned char *sha1) { int bytes = strlen(buffer) + 1; - unsigned char *buf = xmalloc(1+size); + unsigned char *buf = xmallocz(size); unsigned long n; int status = Z_OK;
--
1.6.6.1.439.gf06b6