X-Git-Url: https://git.saurik.com/apple/security.git/blobdiff_plain/d87e115847b84cc1c3a1ef198a20181cd85b5309..60c433a9f80a92b51b33f65f1f58883e8fe843be:/Security/libsecurity_codesigning/lib/cdbuilder.cpp

diff --git a/Security/libsecurity_codesigning/lib/cdbuilder.cpp b/Security/libsecurity_codesigning/lib/cdbuilder.cpp
index 61900bc1..45204a26 100644
--- a/Security/libsecurity_codesigning/lib/cdbuilder.cpp
+++ b/Security/libsecurity_codesigning/lib/cdbuilder.cpp
@@ -183,6 +183,9 @@ CodeDirectory *CodeDirectory::Builder::build()
 	if (!(mDir = (CodeDirectory *)calloc(1, total)))	// initialize to zero
 		UnixError::throwMe(ENOMEM);
 	
+	if (mExecLength > UINT32_MAX)
+		MacOSError::throwMe(errSecCSTooBig);
+	
 	// fill header
 	mDir->initialize(total);
 	mDir->version = version;