1 files changed, 32 insertions, 0 deletions
diff --git a/libmscgen/gd_security.c b/libmscgen/gd_security.c
new file mode 100644
index 0000000..0051ebf
--- /dev/null
+++ b/libmscgen/gd_security.c
@@ -0,0 +1,32 @@
+/*
+   * gd_security.c
+   *
+   * Implements buffer overflow check routines.
+   *
+   * Written 2004, Phil Knirsch.
+   * Based on netpbm fixes by Alan Cox.
+   *
+ */
+
+#ifdef HAVE_CONFIG_H
+#include "config.h"
+#endif
+
+#include <stdio.h>
+#include <stdlib.h>
+#include <limits.h>
+#include "gd.h"
+#include "gd_errors.h"
+
+int overflow2(int a, int b)
+{
+	if(a <= 0 || b <= 0) {
+		gd_error_ex(GD_WARNING, "one parameter to a memory allocation multiplication is negative or zero, failing operation gracefully\n");
+		return 1;
+	}
+	if(a > INT_MAX / b) {
+		gd_error_ex(GD_WARNING, "product of memory allocation multiplication would exceed INT_MAX, failing operation gracefully\n");
+		return 1;
+	}
+	return 0;
+}