docproc: guard against overflow

Signed-off-by: Zoltan Fridrich <zfridric@redhat.com> Signed-off-by: Stephan Mueller <smueller@chronox.de>
smuellerDD · May 16, 2024 · bbc8b33 · bbc8b33
1 parent 805d2dd
commit bbc8b33
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/lib/doc/bin/docproc.c b/lib/doc/bin/docproc.c
@@ -35,6 +35,7 @@
  */
 
 #define _GNU_SOURCE
+#include <stdint.h>
 #include <stdio.h>
 #include <stdlib.h>
 #include <string.h>
@@ -402,7 +403,8 @@ static void find_all_symbols(char *filename)
 			do {
 				while ((ret = read(pipefd[0],
 						   data + data_len,
-						   4096)) > 0) {
+						   4096)) > 0 &&
+				       data_len <= SIZE_MAX - 4096 - (size_t)ret) {
 					data_len += (size_t)ret;
 					data = realloc(data, data_len + 4096);
 					if (!data) {