Handle possible array size overflow

In the StackTraceArray::Allocate
dotnet · Jun 10, 2024 · 69d1e71 · 69d1e71
1 parent f774c60
commit 69d1e71
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/src/coreclr/vm/object.cpp b/src/coreclr/vm/object.cpp
@@ -1484,9 +1484,9 @@ void StackTraceArray::Allocate(size_t size)
     }
     CONTRACTL_END;
 
-    size_t raw_size = size * sizeof(StackTraceElement) + sizeof(ArrayHeader);
+    S_SIZE_T raw_size = S_SIZE_T(size) * S_SIZE_T(sizeof(StackTraceElement)) + S_SIZE_T(sizeof(ArrayHeader));
 
-    if (!FitsIn<DWORD>(raw_size))
+    if (raw_size.IsOverflow() || !FitsIn<DWORD>(raw_size))
     {
         EX_THROW(EEMessageException, (kOverflowException, IDS_EE_ARRAY_DIMENSIONS_EXCEEDED));
     }