mg_to64 overflow protection

This commit is contained in:
cpq 2021-03-17 13:46:50 +00:00
parent 4dbb2da78f
commit 531c47b47c
2 changed files with 4 additions and 2 deletions

View File

@ -4195,11 +4195,12 @@ int mg_asprintf(char **buf, size_t size, const char *fmt, ...) {
}
int64_t mg_to64(struct mg_str str) {
int64_t result = 0, neg = 1;
int64_t result = 0, neg = 1, max = 922337203685477580 /* INT64_MAX / 10 */;
size_t i = 0;
while (i < str.len && (str.ptr[i] == ' ' || str.ptr[i] == '\t')) i++;
if (i < str.len && str.ptr[i] == '-') neg = -1, i++;
while (i < str.len && str.ptr[i] >= '0' && str.ptr[i] <= '9') {
if (result > max) return 0;
result *= 10;
result += (str.ptr[i] - '0');
i++;

View File

@ -262,11 +262,12 @@ int mg_asprintf(char **buf, size_t size, const char *fmt, ...) {
}
int64_t mg_to64(struct mg_str str) {
int64_t result = 0, neg = 1;
int64_t result = 0, neg = 1, max = 922337203685477580 /* INT64_MAX / 10 */;
size_t i = 0;
while (i < str.len && (str.ptr[i] == ' ' || str.ptr[i] == '\t')) i++;
if (i < str.len && str.ptr[i] == '-') neg = -1, i++;
while (i < str.len && str.ptr[i] >= '0' && str.ptr[i] <= '9') {
if (result > max) return 0;
result *= 10;
result += (str.ptr[i] - '0');
i++;