This commit is contained in:
James McCoy 2017-04-09 01:17:15 -04:00
parent 4af6c60826
commit 06a96df510
No known key found for this signature in database
GPG Key ID: DFE691AE331BA3DB

View File

@ -1571,8 +1571,9 @@ spell_read_tree (
// The tree size was computed when writing the file, so that we can
// allocate it as one long block. <nodecount>
long len = get4c(fd);
if (len < 0)
if (len < 0) {
return SP_TRUNCERROR;
}
if ((size_t)len >= SIZE_MAX / sizeof(int)) {
// Invalid length, multiply with sizeof(int) would overflow.
return SP_FORMERROR;