[patch] openafs-sa-2013-002.patch

openafs-sa-2013-002.patch (text/plain), 494 bytes, created by Andrej Filipcic on 2013-03-07 07:26:22 UTC

diff --git a/src/ptserver/ptprocs.c b/src/ptserver/ptprocs.c
index ee56bcf..ae1a562 100644
--- a/src/ptserver/ptprocs.c
+++ b/src/ptserver/ptprocs.c
@@ -679,7 +679,7 @@ idToName(struct rx_call *call, idlist *aid, namelist *aname)
     size = aid->idlist_len;
     if (size == 0)
 	return 0;
-    if (size < 0)
+    if (size < 0 || size > INT_MAX / PR_MAXNAMELEN)
 	return PRTOOMANY;
     aname->namelist_val = (prname *) malloc(size * PR_MAXNAMELEN);
     aname->namelist_len = 0;