svn commit: r314777 - head/lib/libpam/modules/pam_exec
Pedro F. Giffuni
pfg at FreeBSD.org
Mon Mar 6 15:37:35 UTC 2017
Author: pfg
Date: Mon Mar 6 15:37:34 2017
New Revision: 314777
URL: https://svnweb.freebsd.org/changeset/base/314777
Log:
libfetch: extra bounds checking through reallocarray(3).
Reviewed by: des
MFC after: 1 week
Modified:
head/lib/libpam/modules/pam_exec/pam_exec.c
Modified: head/lib/libpam/modules/pam_exec/pam_exec.c
==============================================================================
--- head/lib/libpam/modules/pam_exec/pam_exec.c Mon Mar 6 15:16:15 2017 (r314776)
+++ head/lib/libpam/modules/pam_exec/pam_exec.c Mon Mar 6 15:37:34 2017 (r314777)
@@ -138,7 +138,7 @@ _pam_exec(pam_handle_t *pamh __unused,
nitems = sizeof(env_items) / sizeof(*env_items);
/* Count PAM return values put in the environment. */
nitems_rv = options->return_prog_exit_status ? PAM_RV_COUNT : 0;
- tmp = realloc(envlist, (envlen + nitems + 1 + nitems_rv + 1) *
+ tmp = reallocarray(envlist, envlen + nitems + 1 + nitems_rv + 1,
sizeof(*envlist));
if (tmp == NULL) {
openpam_free_envlist(envlist);
More information about the svn-src-head
mailing list