pkgs/development/libraries/libyaml/cve-2013-6393_b.patch


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16

--- a/src/api.c	
+++ a/src/api.c	
@@ -117,7 +117,12 @@ 
 YAML_DECLARE(int)
 yaml_stack_extend(void **start, void **top, void **end)
 {
-    void *new_start = yaml_realloc(*start, ((char *)*end - (char *)*start)*2);
+    void *new_start;
+
+    if ((char *)*end - (char *)*start >= INT_MAX / 2)
+	return 0;
+
+    new_start = yaml_realloc(*start, ((char *)*end - (char *)*start)*2);
 
     if (!new_start) return 0;