source: rtems/cpukit/libcsupport/src/rtemscalloc.c @ 51defd92

Last change on this file since 51defd92 was 51defd92, checked in by Sebastian Huber <sebastian.huber@…>, on 04/20/21 at 17:30:35

Fix calloc() behaviour in case of overflow

The multiplication to calculate the length of the memory area to
allocate may overflow. Return NULL in case of an overflow.

Close #4389.

  • Property mode set to 100644
File size: 2.0 KB
Line 
1/* SPDX-License-Identifier: BSD-2-Clause */
2
3/**
4 * @file
5 *
6 * @ingroup libcsupport
7 *
8 * @brief This source file contains the implementation of rtems_calloc().
9 */
10
11/*
12 * Copyright (C) 2018 embedded brains GmbH (http://www.embedded-brains.de)
13 *
14 * Redistribution and use in source and binary forms, with or without
15 * modification, are permitted provided that the following conditions
16 * are met:
17 * 1. Redistributions of source code must retain the above copyright
18 *    notice, this list of conditions and the following disclaimer.
19 * 2. Redistributions in binary form must reproduce the above copyright
20 *    notice, this list of conditions and the following disclaimer in the
21 *    documentation and/or other materials provided with the distribution.
22 *
23 * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS"
24 * AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
25 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
26 * ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE
27 * LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
28 * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
29 * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
30 * INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
31 * CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
32 * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
33 * POSSIBILITY OF SUCH DAMAGE.
34 */
35
36#ifdef HAVE_CONFIG_H
37#include "config.h"
38#endif
39
40#include <rtems/malloc.h>
41
42#include <string.h>
43
44void *rtems_calloc( size_t nelem, size_t elsize )
45{
46  size_t  length;
47  void   *p;
48
49  if ( nelem == 0 ) {
50    length = 0;
51  } else if ( elsize > SIZE_MAX / nelem ) {
52    return NULL;
53  } else {
54    length = nelem * elsize;
55  }
56
57  p = rtems_malloc( length );
58  RTEMS_OBFUSCATE_VARIABLE( p );
59  if ( RTEMS_PREDICT_FALSE( p == NULL ) ) {
60    return p;
61  }
62
63  return memset( p, 0, length );
64}
Note: See TracBrowser for help on using the repository browser.