diff --git a/src/lib/libc/stdlib/icdb.c b/src/lib/libc/stdlib/icdb.c index 16d5300a..e33a0437 100644 --- a/src/lib/libc/stdlib/icdb.c +++ b/src/lib/libc/stdlib/icdb.c @@ -1,4 +1,4 @@ -/* $OpenBSD: icdb.c,v 1.3 2015/11/25 15:49:50 guenther Exp $ */ +/* $OpenBSD: icdb.c,v 1.4 2015/12/10 18:06:06 tedu Exp $ */ /* * Copyright (c) 2015 Ted Unangst * @@ -162,6 +162,8 @@ icdb_open(const char *name, int flags, uint32_t version) return NULL; if (fstat(fd, &sb) != 0) goto fail; + if (sb.st_size < sizeof(struct icdbinfo)) + goto fail; ptr = mmap(NULL, sb.st_size, PROT_READ | ((flags & O_RDWR) ? PROT_WRITE : 0), MAP_SHARED, fd, 0); if (ptr == MAP_FAILED)