romenskiy2012/curl
1
0
Fork 0
mirror of https://github.com/curl/curl.git synced 2026-04-26 09:32:12 +03:00
Code Issues Projects Releases Packages Wiki Activity

urlglob: fix zero size malloc

Browse source
This commit is contained in:
Yang Tse 2011-06-02 22:19:39 +02:00
parent 65a9fa59dc
commit bf749bb2c5
1 changed files with 17 additions and 7 deletions
Download patch file Download diff file Expand all files Collapse all files

24
src/urlglob.c
View file

@ -70,8 +70,8 @@ static GlobCode glob_set(URLGlob *glob, char *pattern,
pat->type = UPTSet;
pat->content.Set.size = 0;
pat->content.Set.ptr_s = 0;
/* FIXME: Here's a nasty zero size malloc */
pat->content.Set.elements = malloc(0);
pat->content.Set.elements = NULL;
++glob->size;
while(!done) {
@ -90,15 +90,23 @@ static GlobCode glob_set(URLGlob *glob, char *pattern,
case ',':
case '}': /* set element completed */
*buf = '\0';
pat->content.Set.elements =
realloc(pat->content.Set.elements,
(pat->content.Set.size + 1) * sizeof(char*));
if(pat->content.Set.elements)
pat->content.Set.elements =
realloc(pat->content.Set.elements,
(pat->content.Set.size + 1) * sizeof(char*));
else
pat->content.Set.elements =
malloc((pat->content.Set.size + 1) * sizeof(char*));
if(!pat->content.Set.elements) {
snprintf(glob->errormsg, sizeof(glob->errormsg), "out of memory");
return GLOB_ERROR;
}
pat->content.Set.elements[pat->content.Set.size] =
strdup(glob->glob_buffer);
if(!pat->content.Set.elements[pat->content.Set.size]) {
snprintf(glob->errormsg, sizeof(glob->errormsg), "out of memory");
return GLOB_ERROR;
}
++pat->content.Set.size;
if(*pattern == '}') {
@ -363,11 +371,13 @@ void glob_cleanup(URLGlob* glob)
free(glob->literal[i/2]);
}
else { /* odd indexes contain sets or ranges */
if(glob->pattern[i/2].type == UPTSet) {
if((glob->pattern[i/2].type == UPTSet) &&
(glob->pattern[i/2].content.Set.elements)) {
for(elem = glob->pattern[i/2].content.Set.size - 1;
elem >= 0;
--elem) {
free(glob->pattern[i/2].content.Set.elements[elem]);
if(glob->pattern[i/2].content.Set.elements[elem])
free(glob->pattern[i/2].content.Set.elements[elem]);
}
free(glob->pattern[i/2].content.Set.elements);
}