# HG changeset patch # User Sergey Mironov # Date 1409679442 0 # Node ID 382911d72e636e7910ccf1448352e1708f7f5205 # Parent 262dd74df39cf5f46695696a029e3aa1fc3c2373 Check realloc's return code to prevent segfault on out of memory condition (Part 3) diff -r 262dd74df39c -r 382911d72e63 src/c/http.c --- a/src/c/http.c Tue Sep 02 17:36:14 2014 +0000 +++ b/src/c/http.c Tue Sep 02 17:37:22 2014 +0000 @@ -97,8 +97,15 @@ if (back - buf == buf_size - 1) { char *new_buf; - buf_size *= 2; - new_buf = realloc(buf, buf_size); + size_t new_buf_size = buf_size*2; + new_buf = realloc(buf, new_buf_size); + if(!new_buf) { + qfprintf(stderr, "Realloc failed while receiving header\n"); + close(sock); + sock = 0; + break; + } + buf_size = new_buf_size; back = new_buf + (back - buf); buf = new_buf; } @@ -146,9 +153,16 @@ while (back - body < clen) { if (back - buf == buf_size - 1) { char *new_buf; - buf_size *= 2; - new_buf = realloc(buf, buf_size); + size_t new_buf_size = buf_size * 2; + new_buf = realloc(buf, new_buf_size); + if(!new_buf) { + qfprintf(stderr, "Realloc failed while receiving content\n"); + close(sock); + sock = 0; + goto done; + } + buf_size = new_buf_size; back = new_buf + (back - buf); body = new_buf + (body - buf); s = new_buf + (s - buf);