X-Git-Url: https://git.saurik.com/apple/security.git/blobdiff_plain/d8f41ccd20de16f8ebe2ccc84d47bf1cb2b26bbb..60c433a9f80a92b51b33f65f1f58883e8fe843be:/Security/libsecurity_codesigning/lib/cdbuilder.cpp

diff --git a/Security/libsecurity_codesigning/lib/cdbuilder.cpp b/Security/libsecurity_codesigning/lib/cdbuilder.cpp
index 61900bc1..45204a26 100644
--- a/Security/libsecurity_codesigning/lib/cdbuilder.cpp
+++ b/Security/libsecurity_codesigning/lib/cdbuilder.cpp
@@ -183,6 +183,9 @@ CodeDirectory *CodeDirectory::Builder::build()
 	if (!(mDir = (CodeDirectory *)calloc(1, total)))	// initialize to zero
 		UnixError::throwMe(ENOMEM);
 	
+	if (mExecLength > UINT32_MAX)
+		MacOSError::throwMe(errSecCSTooBig);
+	
 	// fill header
 	mDir->initialize(total);
 	mDir->version = version;