Send patches - preferably formatted by git format-patch - to patches at archlinux32 dot org.
summaryrefslogtreecommitdiff
path: root/lib/libalpm/md5.c
diff options
context:
space:
mode:
authorTobias Stoeckmann <tobias@stoeckmann.org>2016-06-18 18:41:07 +0200
committerAllan McRae <allan@archlinux.org>2016-08-30 18:10:40 +1000
commit5fcd60e2641c9293c2783aad509baf217e77aa6f (patch)
tree9b7d209b26e4eefae61276c047616b52da9c20e7 /lib/libalpm/md5.c
parent681509fd445ed6012e6ecf89b49e9c00d83b70cd (diff)
Reject files larger than 16384 bytes in read_sigfile.
If signature files are larger than SIZE_MAX, not enough memory could be allocated for this file. The script repo-add rejects files which are larger than 16384 bytes, therefore handle these as errors here, too. While at it, I also rearranged the code to avoid a quite harmless TOCTOU race condition between stat() and fopen(). Signed-off-by: Tobias Stoeckmann <tobias@stoeckmann.org> Signed-off-by: Allan McRae <allan@archlinux.org>
Diffstat (limited to 'lib/libalpm/md5.c')
0 files changed, 0 insertions, 0 deletions