git: DragonFly_RELEASE_6_4 contrib/flex: Guard against int overflow in sko_push().
Aaron LI
aly at crater.dragonflybsd.org
Sun Sep 27 04:09:28 PDT 2026
commit 2052d4fa5c1094dedae6a58171eb8ddee4e4865d
Author: David Bidner <david at crap.solutions>
Date: Sat Sep 26 04:57:09 2026 +0200
contrib/flex: Guard against int overflow in sko_push().
sko_sz is an int; doubling it unchecked could overflow and produce a
huge size_t for realloc(). Bail out if it would overflow.
It's sad that the upstream project hasn't had a new release since 2017,
so we decided to directly patch the contributed source.
Bug: #3426
Summary of changes:
contrib/flex/README.DRAGONFLY | 3 +++
contrib/flex/src/misc.c | 8 ++++++--
2 files changed, 9 insertions(+), 2 deletions(-)
http://gitweb.dragonflybsd.org/dragonfly.git/commitdiff/2052d4fa5c1094dedae6a58171eb8ddee4e4865d
--
DragonFly BSD source repository
More information about the Commits
mailing list