Fix potential DOS in decompilers (CVS-2017-8782)

Closes #70
libming · Jun 2, 2017 · 6eca133 · 6eca133
1 parent e661d0f
commit 6eca133
Show file tree

Hide file tree

Showing 2 changed files with 12 additions and 0 deletions.
diff --git a/NEWS b/NEWS
@@ -1,5 +1,7 @@
 0.4.9-dev - YYYY-MM-DD
 
+  * Fix potential DOS in decompilers (CVS-2017-8782, issue #70)
+
 0.4.8 - 2017-04-07
 
   * Add PHP7 compatibility

diff --git a/util/read.c b/util/read.c
@@ -247,6 +247,11 @@ char *readString(FILE *f)
     if(len >= buflen-2)
     {
       buf = (char *)realloc(buf, sizeof(char)*(buflen+256));
+      if ( ! buf )
+      {
+        fprintf(stderr, "failed reallocating %d bytes\n", buflen+256);
+        exit(-1);
+      }
       buflen += 256;
       p = buf+len;
     }
@@ -350,6 +355,11 @@ char *readSizedString(FILE *f,int size)
     if(len >= buflen-2)
     {
       buf = (char *)realloc(buf, sizeof(char)*(buflen+256));
+      if ( ! buf )
+      {
+        fprintf(stderr, "failed reallocating %d bytes\n", buflen+256);
+        exit(-1);
+      }
       buflen += 256;
       p = buf+len;
     }