docproc: guard against overflow

Signed-off-by: Zoltan Fridrich <zfridric@redhat.com>
smuellerDD · May 10, 2024 · 56e4e01 · 56e4e01
1 parent 805d2dd
commit 56e4e01
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/lib/doc/bin/docproc.c b/lib/doc/bin/docproc.c
@@ -402,7 +402,8 @@ static void find_all_symbols(char *filename)
 			do {
 				while ((ret = read(pipefd[0],
 						   data + data_len,
-						   4096)) > 0) {
+						   4096)) > 0 &&
+				       data_len <= SIZE_MAX - 4096 - ret) {
 					data_len += (size_t)ret;
 					data = realloc(data, data_len + 4096);
 					if (!data) {