git: DragonFly_RELEASE_6_4 contrib/flex: Guard against int overflow in sko_push().

Aaron LI aly at crater.dragonflybsd.org
Sun Sep 27 04:09:28 PDT 2026


commit 2052d4fa5c1094dedae6a58171eb8ddee4e4865d
Author: David Bidner <david at crap.solutions>
Date:   Sat Sep 26 04:57:09 2026 +0200

    contrib/flex: Guard against int overflow in sko_push().
    
    sko_sz is an int; doubling it unchecked could overflow and produce a
    huge size_t for realloc(). Bail out if it would overflow.
    
    It's sad that the upstream project hasn't had a new release since 2017,
    so we decided to directly patch the contributed source.
    
    Bug: #3426

Summary of changes:
 contrib/flex/README.DRAGONFLY | 3 +++
 contrib/flex/src/misc.c       | 8 ++++++--
 2 files changed, 9 insertions(+), 2 deletions(-)

http://gitweb.dragonflybsd.org/dragonfly.git/commitdiff/2052d4fa5c1094dedae6a58171eb8ddee4e4865d


-- 
DragonFly BSD source repository


More information about the Commits mailing list