RepoMirrors
/
mpv
mirror of https://github.com/mpv-player/mpv
1
0
Fork 0
Code Issues Releases Wiki Activity

options/m_option: limit string list to 100 per operation for fuzzing

This commit is contained in:
Kacper Michajłow 2024-11-01 16:52:14 +01:00
parent bc9d982330
commit 1f5a67d8fa
1 changed files with 11 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

11
options/m_option.c
View File

@ -1317,6 +1317,13 @@ static int str_list_add(char **add, int n, void *dst, int pre)
for (ln = 0; lst && lst[ln]; ln++) for (ln = 0; lst && lst[ln]; ln++)
/**/; /**/;
#ifdef FUZZING_BUILD_MODE_UNSAFE_FOR_PRODUCTION
if (ln >= 100) {
talloc_free(add);
return 0;
}
#endif
lst = talloc_realloc(NULL, lst, char *, n + ln + 1); lst = talloc_realloc(NULL, lst, char *, n + ln + 1);
if (pre) { if (pre) {
@ -1447,6 +1454,10 @@ static int parse_str_list_impl(struct mp_log *log, const m_option_t *opt,
n = 0; n = 0;
while (1) { while (1) {
#ifdef FUZZING_BUILD_MODE_UNSAFE_FOR_PRODUCTION
if (n >= 100)
break;
#endif
struct bstr el = get_nextsep(&str, separator, 1); struct bstr el = get_nextsep(&str, separator, 1);
res[n] = bstrdup0(NULL, el); res[n] = bstrdup0(NULL, el);
n++; n++;