picnoir
/
Systemd
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

shared/varlink: add missing setting of output_buffer_allocated 

Fixes https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14708,
https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14735,
https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14725,
https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14720,
and probably others.
This commit is contained in:
Zbigniew Jędrzejewski-Szmek 2019-05-17 13:35:18 +02:00
parent 21f0c55a2c
commit be44e09162
2 changed files with 4 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
src/shared/varlink.c
View File

@ -1235,15 +1235,16 @@ static int varlink_enqueue_json(Varlink *v, JsonVariant *m) {
} else {
char *n;
const size_t new_size = v->output_buffer_size + r + 1;
n = new(char, v->output_buffer_size + r + 1);
n = new(char, new_size);
if (!n)
return -ENOMEM;
memcpy(mempcpy(n, v->output_buffer + v->output_buffer_index, v->output_buffer_size), text, r + 1);
free_and_replace(v->output_buffer, n);
v->output_buffer_size += r + 1;
v->output_buffer_allocated = v->output_buffer_size = new_size;
v->output_buffer_index = 0;
}

1
test/fuzz/fuzz-varlink/oss-fuzz-14708 Normal file
View File

File diff suppressed because one or more lines are too long