summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorYusuke Endoh <[email protected]>2022-11-09 00:37:46 +0900
committerYusuke Endoh <[email protected]>2022-11-09 23:21:26 +0900
commitd868f4ca31339095991e162e010fcda0f2d7bd39 ()
treea09332bd78d80f80e315b3fcf940add64cf1434a
parent14845ab4ffccc317a08629f4503c87ee97621c0b (diff)
Check for integer overflow in the allocation of match_cache table
-rw-r--r--regexec.c4
1 files changed, 4 insertions, 0 deletions
@@ -3842,6 +3842,10 @@ match_at(regex_t* reg, const UChar* str, const UChar* end,
size_t len = (end - str) + 1;
size_t match_cache_size8 = (size_t)msa->num_cache_opcode * len;
/* overflow check */
if (match_cache_size8 >= INT_MAX_LIMIT) {
return ONIGERR_MEMORY;
}