summaryrefslogtreecommitdiff
path: root/lib/libc
diff options
context:
space:
mode:
authorTed Unangst <tedu@cvs.openbsd.org>2015-12-10 18:06:07 +0000
committerTed Unangst <tedu@cvs.openbsd.org>2015-12-10 18:06:07 +0000
commit8ca5cc7124d305c5fc6badc4c34332034984293a (patch)
tree2f0e0e636093903f989c5fc854abae402af9adae /lib/libc
parentf5e464616daa6d10d2cac98e8fbef66c47ff90ab (diff)
tiny sanity check on file size
Diffstat (limited to 'lib/libc')
-rw-r--r--lib/libc/stdlib/icdb.c4
1 files changed, 3 insertions, 1 deletions
diff --git a/lib/libc/stdlib/icdb.c b/lib/libc/stdlib/icdb.c
index 16d5300ab3d..e33a043795f 100644
--- a/lib/libc/stdlib/icdb.c
+++ b/lib/libc/stdlib/icdb.c
@@ -1,4 +1,4 @@
-/* $OpenBSD: icdb.c,v 1.3 2015/11/25 15:49:50 guenther Exp $ */
+/* $OpenBSD: icdb.c,v 1.4 2015/12/10 18:06:06 tedu Exp $ */
/*
* Copyright (c) 2015 Ted Unangst <tedu@openbsd.org>
*
@@ -162,6 +162,8 @@ icdb_open(const char *name, int flags, uint32_t version)
return NULL;
if (fstat(fd, &sb) != 0)
goto fail;
+ if (sb.st_size < sizeof(struct icdbinfo))
+ goto fail;
ptr = mmap(NULL, sb.st_size, PROT_READ |
((flags & O_RDWR) ? PROT_WRITE : 0), MAP_SHARED, fd, 0);
if (ptr == MAP_FAILED)