From 185f0474509fef19052562b6264fa3ca25bb1bc8 Mon Sep 17 00:00:00 2001 From: Roger Dingledine Date: Mon, 29 Nov 2004 06:43:21 +0000 Subject: [PATCH] prevent integer underflow (not currently exploitable, ilja and i think) svn:r3010 --- src/common/log.c | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/src/common/log.c b/src/common/log.c index f227ebc399..4e4bc1862b 100644 --- a/src/common/log.c +++ b/src/common/log.c @@ -122,6 +122,10 @@ static INLINE char *format_msg(char *buf, size_t buf_len, size_t n; int r; char *end_of_prefix; + if (buf_len < 2) { /* prevent integer underflow */ + tor_assert(0); + exit(1); + } buf_len -= 2; /* subtract 2 characters so we have room for \n\0 */ n = _log_prefix(buf, buf_len, severity);