Alex Rebert 30f17aa206 Fix heap out-of-bounds write in _m3d_safestr ...

While there is a 256 character limit when computing the length of the
newly allocated strength, that limit was missing when copying the
string. This commit adds a new length check in the copy loop, preventing
it from writhing out of bounds.

Fix https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=34416

2021-10-28 21:32:38 -04:00

216 KiB

Raw Blame History

View Raw