circlecloud/tmux
1
0
Fork 0
mirror of https://github.com/tmux/tmux.git synced 2026-10-10 20:24:21 +00:00
Code Issues Projects Releases Wiki Activity

Fix overflow-prone size check.

Browse Source
This commit is contained in:
Michael Grant
2026-10-09 22:55:15 +02:00
parent 5d1c25c5c9
commit 6826d87bdb
2 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
image.c
View File

@@ -966,7 +966,7 @@ image_create(u_int width, u_int height, u_int canvas_width,
if (width == 0 || height == 0 || canvas_width < width ||
canvas_height < height || sx == 0 || sy == 0 || pixels == NULL)
return (NULL);
if ((uint64_t)width * height * 4 > SIZE_MAX)
if ((uint64_t)width * height > SIZE_MAX / 4)
return (NULL);
if ((uint64_t)sx * sy > SIZE_MAX / sizeof *im->cells ||
sx > USHRT_MAX || sy > USHRT_MAX)