From f0f456398da65fc36837c0ab66b983a69b6f9e3e Mon Sep 17 00:00:00 2001 From: iphydf Date: Sat, 11 Aug 2018 13:01:09 +0000 Subject: [PATCH] Check that the save file size isn't larger than our address space. --- auto_tests/file_saving_test.c | 2 ++ 1 file changed, 2 insertions(+) diff --git a/auto_tests/file_saving_test.c b/auto_tests/file_saving_test.c index a5ba7e1f..13a98280 100644 --- a/auto_tests/file_saving_test.c +++ b/auto_tests/file_saving_test.c @@ -82,6 +82,8 @@ static void load_data_decrypted(void) int64_t size = ftell(f); fseek(f, 0, SEEK_SET); + ck_assert_msg(0 <= size && size <= SIZE_MAX, "file size out of range"); + uint8_t *cipher = (uint8_t *)malloc(size); uint8_t *clear = (uint8_t *)malloc(size - TOX_PASS_ENCRYPTION_EXTRA_LENGTH); size_t read_value = fread(cipher, sizeof(*cipher), size, f);