diff options
| author | Tobias Stoeckmann <tobias@stoeckmann.org> | 2016-06-18 18:41:07 +0200 |
|---|---|---|
| committer | Allan McRae <allan@archlinux.org> | 2016-08-30 10:10:40 +0200 |
| commit | 5fcd60e2641c9293c2783aad509baf217e77aa6f (patch) | |
| tree | 9b7d209b26e4eefae61276c047616b52da9c20e7 /contrib | |
| parent | 681509fd445ed6012e6ecf89b49e9c00d83b70cd (diff) | |
| download | pacman-5fcd60e2641c9293c2783aad509baf217e77aa6f.tar.gz pacman-5fcd60e2641c9293c2783aad509baf217e77aa6f.tar.xz | |
Reject files larger than 16384 bytes in read_sigfile.
If signature files are larger than SIZE_MAX, not enough memory could
be allocated for this file. The script repo-add rejects files which
are larger than 16384 bytes, therefore handle these as errors here,
too.
While at it, I also rearranged the code to avoid a quite harmless
TOCTOU race condition between stat() and fopen().
Signed-off-by: Tobias Stoeckmann <tobias@stoeckmann.org>
Signed-off-by: Allan McRae <allan@archlinux.org>
Diffstat (limited to 'contrib')
0 files changed, 0 insertions, 0 deletions