mirror of
https://github.com/tmux/tmux.git
synced 2026-04-16 03:56:28 +00:00
Limit argc to between 0 and 1000 to prevent fatal from MSG_COMMAND, from
Michal Majchrowicz.
This commit is contained in:
2
cmd.c
2
cmd.c
@@ -304,6 +304,8 @@ cmd_unpack_argv(char *buf, size_t len, int argc, char ***argv)
|
|||||||
|
|
||||||
if (argc == 0)
|
if (argc == 0)
|
||||||
return (0);
|
return (0);
|
||||||
|
if (argc < 0 || argc > 1000)
|
||||||
|
return (-1);
|
||||||
*argv = xcalloc(argc, sizeof **argv);
|
*argv = xcalloc(argc, sizeof **argv);
|
||||||
|
|
||||||
buf[len - 1] = '\0';
|
buf[len - 1] = '\0';
|
||||||
|
|||||||
Reference in New Issue
Block a user