From 0419a8e5bdc58189f1039ff44ff4a4e15a447d42 Mon Sep 17 00:00:00 2001 From: Fabian Keil Date: Sun, 27 Dec 2015 12:46:34 +0000 Subject: [PATCH] execute_external_filter(): Assert that the buffer for the filter output is large enough --- filters.c | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/filters.c b/filters.c index 6b25fc52..55fdc3d1 100644 --- a/filters.c +++ b/filters.c @@ -1,4 +1,4 @@ -const char filters_rcs[] = "$Id: filters.c,v 1.193 2015/08/12 10:34:21 fabiankeil Exp $"; +const char filters_rcs[] = "$Id: filters.c,v 1.194 2015/08/21 10:58:53 fabiankeil Exp $"; /********************************************************************* * * File : $Source: /cvsroot/ijbswa/current/filters.c,v $ @@ -1897,6 +1897,7 @@ static char *execute_external_filter(const struct client_state *csp, } filter_output = p; } + assert(new_size + READ_LENGTH < *size); len = fread(&filter_output[new_size], 1, READ_LENGTH, fp); if (len > 0) { -- 2.39.2