Security-57031.30.12.tar.gz

[apple/security.git] / Security / libsecurity_codesigning / lib / cdbuilder.cpp

diff --git a/Security/libsecurity_codesigning/lib/cdbuilder.cpp b/Security/libsecurity_codesigning/lib/cdbuilder.cpp
index 61900bc1f822c98b24d75033583aef15dad1fe72..45204a263c4a835684fe332504966854e6acda4d 100644 (file)
--- a/Security/libsecurity_codesigning/lib/cdbuilder.cpp
+++ b/Security/libsecurity_codesigning/lib/cdbuilder.cpp
@@ -183,6 +183,9 @@ CodeDirectory *CodeDirectory::Builder::build()
        if (!(mDir = (CodeDirectory *)calloc(1, total)))        // initialize to zero
                UnixError::throwMe(ENOMEM);
        
+       if (mExecLength > UINT32_MAX)
+               MacOSError::throwMe(errSecCSTooBig);
+       
        // fill header
        mDir->initialize(total);
        mDir->version = version;