projects
/
platform
/
upstream
/
systemd.git
/ commitdiff
commit
grep
author
committer
pickaxe
?
search:
re
summary
|
shortlog
|
log
|
commit
| commitdiff |
tree
raw
|
patch
| inline |
side by side
(parent:
b5ffbc5
)
parse-util: detect overflows in parse_percent_unbounded()
author
Lennart Poettering
<lennart@poettering.net>
Tue, 16 Jan 2018 10:50:12 +0000
(11:50 +0100)
committer
Lennart Poettering
<lennart@poettering.net>
Tue, 16 Jan 2018 10:53:43 +0000
(11:53 +0100)
We shouldn't accept percentages beyon INT32_MAX and consider them
valid.
src/basic/parse-util.c
patch
|
blob
|
history
diff --git
a/src/basic/parse-util.c
b/src/basic/parse-util.c
index
14687b1
..
2c22753
100644
(file)
--- a/
src/basic/parse-util.c
+++ b/
src/basic/parse-util.c
@@
-592,19
+592,20
@@
int parse_fractional_part_u(const char **p, size_t digits, unsigned *res) {
int parse_percent_unbounded(const char *p) {
const char *pc, *n;
- unsigned v;
- int r;
+ int r, v;
pc = endswith(p, "%");
if (!pc)
return -EINVAL;
n = strndupa(p, pc - p);
- r = safe_ato
u
(n, &v);
+ r = safe_ato
i
(n, &v);
if (r < 0)
return r;
+ if (v < 0)
+ return -ERANGE;
- return
(int)
v;
+ return v;
}
int parse_percent(const char *p) {