X-Git-Url: https://asedeno.scripts.mit.edu/gitweb/?a=blobdiff_plain;f=misc.c;h=fea96a97a27637ce0f634d1e10b9e19cc774da22;hb=893d187b81991a7b259ede864b7d18ae60c59589;hp=59e91f2f6033ddfc65d9c90206114b53ccb43e20;hpb=3c44ce243f32d1477645cad0a9fcc933eb9dbe17;p=PuTTY.git

diff --git a/misc.c b/misc.c
index 59e91f2f..fea96a97 100644
--- a/misc.c
+++ b/misc.c
@@ -5,6 +5,7 @@
 #include <stdio.h>
 #include <stdlib.h>
 #include <stdarg.h>
+#include <limits.h>
 #include <ctype.h>
 #include <assert.h>
 #include "putty.h"
@@ -388,14 +389,21 @@ void mlog(char *file, int line)
 }
 #endif
 
-void *safemalloc(size_t size)
+void *safemalloc(size_t n, size_t size)
 {
     void *p;
+
+    if (n > INT_MAX / size) {
+	p = NULL;
+    } else {
+	size *= n;
 #ifdef MINEFIELD
-    p = minefield_c_malloc(size);
+	p = minefield_c_malloc(size);
 #else
-    p = malloc(size);
+	p = malloc(size);
 #endif
+    }
+
     if (!p) {
 	char str[200];
 #ifdef MALLOC_LOG
@@ -415,22 +423,29 @@ void *safemalloc(size_t size)
     return p;
 }
 
-void *saferealloc(void *ptr, size_t size)
+void *saferealloc(void *ptr, size_t n, size_t size)
 {
     void *p;
-    if (!ptr) {
+
+    if (n > INT_MAX / size) {
+	p = NULL;
+    } else {
+	size *= n;
+	if (!ptr) {
 #ifdef MINEFIELD
-	p = minefield_c_malloc(size);
+	    p = minefield_c_malloc(size);
 #else
-	p = malloc(size);
+	    p = malloc(size);
 #endif
-    } else {
+	} else {
 #ifdef MINEFIELD
-	p = minefield_c_realloc(ptr, size);
+	    p = minefield_c_realloc(ptr, size);
 #else
-	p = realloc(ptr, size);
+	    p = realloc(ptr, size);
 #endif
+	}
     }
+
     if (!p) {
 	char str[200];
 #ifdef MALLOC_LOG