[Rpm-maint] [rpm-software-management/rpm] Use xcalloc() instead of open-coded arithmetic (PR #1900)

[Demi Marie Obenour]

This prevents an integer overflow leading to a buffer overflow if a
package has one large file signature and a bunch of smaller ones.  Use
an explicit check to avoid allocating absurd amounts of memory.


You can view, comment on, or merge this pull request online at:

  https://github.com/rpm-software-management/rpm/pull/1900

-- Commit Summary --

  * Use xcalloc() instead of open-coded arithmetic

-- File Changes --

    M lib/rpmfi.c (16)

-- Patch Links --

https://github.com/rpm-software-management/rpm/pull/1900.patch
https://github.com/rpm-software-management/rpm/pull/1900.diff

-- 
Reply to this email directly or view it on GitHub:
https://github.com/rpm-software-management/rpm/pull/1900
You are receiving this because you are subscribed to this thread.

Message ID: <rpm-software-management/rpm/pull/1900 at github.com>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.rpm.org/pipermail/rpm-maint/attachments/20220125/4645616e/attachment.html>