mirror of
https://github.com/OrcaSlicer/OrcaSlicer.git
synced 2026-05-20 03:43:52 +00:00
Security Fix : CVE-2024-45492 in libexpat library. (#10141)
CVE-2024-45492
This commit is contained in:
@@ -6333,6 +6333,15 @@ nextScaffoldPart(XML_Parser parser)
|
|||||||
int next;
|
int next;
|
||||||
|
|
||||||
if (!dtd->scaffIndex) {
|
if (!dtd->scaffIndex) {
|
||||||
|
/* Detect and prevent integer overflow.
|
||||||
|
* The preprocessor guard addresses the "always false" warning
|
||||||
|
* from -Wtype-limits on platforms where
|
||||||
|
* sizeof(unsigned int) < sizeof(size_t), e.g. on x86_64. */
|
||||||
|
#if UINT_MAX >= SIZE_MAX
|
||||||
|
if (parser->m_groupSize > ((size_t)(-1) / sizeof(int))) {
|
||||||
|
return -1;
|
||||||
|
}
|
||||||
|
#endif
|
||||||
dtd->scaffIndex = (int *)MALLOC(groupSize * sizeof(int));
|
dtd->scaffIndex = (int *)MALLOC(groupSize * sizeof(int));
|
||||||
if (!dtd->scaffIndex)
|
if (!dtd->scaffIndex)
|
||||||
return -1;
|
return -1;
|
||||||
|
|||||||
Reference in New Issue
Block a user