mirror of
git://git.tartarus.org/simon/puzzles.git
synced 2025-04-21 08:01:30 -07:00
Limit size of puzzle in Tents to avoid integer overflow
This commit is contained in:
3
tents.c
3
tents.c
@ -32,6 +32,7 @@
|
|||||||
#include <string.h>
|
#include <string.h>
|
||||||
#include <assert.h>
|
#include <assert.h>
|
||||||
#include <ctype.h>
|
#include <ctype.h>
|
||||||
|
#include <limits.h>
|
||||||
#include <math.h>
|
#include <math.h>
|
||||||
|
|
||||||
#include "puzzles.h"
|
#include "puzzles.h"
|
||||||
@ -408,6 +409,8 @@ static const char *validate_params(const game_params *params, bool full)
|
|||||||
*/
|
*/
|
||||||
if (params->w < 4 || params->h < 4)
|
if (params->w < 4 || params->h < 4)
|
||||||
return "Width and height must both be at least four";
|
return "Width and height must both be at least four";
|
||||||
|
if (params->w > (INT_MAX - 1) / params->h)
|
||||||
|
return "Width times height must not be unreasonably large";
|
||||||
return NULL;
|
return NULL;
|
||||||
}
|
}
|
||||||
|
|
||||||
|
Reference in New Issue
Block a user