dev-libs/apr/files/apr-1.6.3-fix-overflow-check-in-overflow_strfsize.patch


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21

https://bz.apache.org/bugzilla/show_bug.cgi?id=62056

--- apr-1.6.3.orig/test/teststr.c
+++ apr-1.6.3.orig/test/teststr.c
@@ -307,10 +307,15 @@ 
     for (; off < 999999999; off += 999) {
         apr_strfsize(off, buf);
     }
-    for (off = 1; off < LONG_MAX && off > 0; off *= 2) {
+
+    off = 1;
+    while (1) {
         apr_strfsize(off, buf);
         apr_strfsize(off + 1, buf);
         apr_strfsize(off - 1, buf);
+        if (off > LONG_MAX / 2)
+            break;
+        off *= 2;
     }
 
     ABTS_ASSERT(tc, "strfsize overflowed", buf[5] == '$');