user-util: paranoia — add overflow check on ERANGE loop

2019-03-12 16:10:55 +01:00
parent 11de56b9fa
commit 47436d30bb
1 changed files with 6 additions and 0 deletions
@@ -350,6 +350,9 @@ char* uid_to_name(uid_t uid) {
                        if (r != ERANGE)
                                break;

+                        if (bufsize > LONG_MAX/2) /* overflow check */
+                                return NULL;
+
                        bufsize *= 2;
                }
        }
@@ -391,6 +394,9 @@ char* gid_to_name(gid_t gid) {
                        if (r != ERANGE)
                                break;

+                        if (bufsize > LONG_MAX/2) /* overflow check */
+                                return NULL;
+
                        bufsize *= 2;
                }
        }