diff options
| author | Vladimir Vukicevic <vladimir@pobox.com> | 2007-06-19 13:15:21 -0700 |
|---|---|---|
| committer | Vladimir Vukicevic <vladimir@feisty.(none)> | 2007-06-29 09:46:08 -0700 |
| commit | 5c7d2d14d78e4dfb1ef6d2c40f0910f177e07360 (patch) | |
| tree | bb1abcb2f1144059d4444d8db343014e07791593 /src/cairo-stroke-style.c | |
| parent | fc34073464c487405b6e2e0a5fa269a1ae15a02a (diff) | |
| download | cairo-5c7d2d14d78e4dfb1ef6d2c40f0910f177e07360.tar.gz | |
[fix] Avoid int overflow when allocating large buffers
This patch introduces three macros: _cairo_malloc_ab,
_cairo_malloc_abc, _cairo_malloc_ab_plus_c and replaces various calls
to malloc(a*b), malloc(a*b*c), and malloc(a*b+c) with them. The macros
return NULL if int overflow would occur during the allocation. See
CODING_STYLE for more information.
Diffstat (limited to 'src/cairo-stroke-style.c')
| -rw-r--r-- | src/cairo-stroke-style.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/src/cairo-stroke-style.c b/src/cairo-stroke-style.c index a1509064b..2eccb80df 100644 --- a/src/cairo-stroke-style.c +++ b/src/cairo-stroke-style.c @@ -62,7 +62,7 @@ _cairo_stroke_style_init_copy (cairo_stroke_style_t *style, if (other->dash == NULL) { style->dash = NULL; } else { - style->dash = malloc (style->num_dashes * sizeof (double)); + style->dash = _cairo_malloc_ab (style->num_dashes, sizeof (double)); if (style->dash == NULL) return CAIRO_STATUS_NO_MEMORY; |