• Max Kellermann's avatar
    ape: check the tag size (fixes integer underflow) · a988b9b0
    Max Kellermann authored
    The expression "tagLen - size > 0" may result in an integer underflow
    and a buffer overflow, when "size" is larger than "tagLen".  "size" is
    read from the input file, and must not be trusted.  This patch changes
    the expression to "tagLen > size", which is a lot safer.
    a988b9b0
To find the state of this project's repository at the time of any of these versions, check out the tags.
NEWS 22.6 KB