shithub: puzzles

Info  •  Files  •  Log  •  Branches

Limit size of puzzle in Tents to avoid integer overflow

--- a/tents.c

+++ b/tents.c

@@ -32,6 +32,7 @@

 #include <string.h>

 #include <assert.h>

 #include <ctype.h>

+#include <limits.h>

 #include <math.h>

 #include "puzzles.h"

@@ -408,6 +409,8 @@

      */

     if (params->w < 4 || params->h < 4)

 	return "Width and height must both be at least four";

+    if (params->w > (INT_MAX - 1) / params->h)

+        return "Width times height must not be unreasonably large";

     return NULL;

 }