Similar to CVE-2017-8782,Integer overflow in function readSizedString,util/read.c:397

[b0b0haha]

Just similar to commit befb74,in func readSizedString() (util/read.c) ,there should be a check to avoid buflen integer overflow before line 397. What's more ,there should be a check for buf which is initialized in line 389 in case of malloc fails.

[b0b0haha]

The screenshot may provide more details about the issue.