diff options
| -rw-r--r-- | src/locale/iconv.c | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/src/locale/iconv.c b/src/locale/iconv.c index 008c93f..5217895 100644 --- a/src/locale/iconv.c +++ b/src/locale/iconv.c @@ -545,6 +545,10 @@ size_t iconv(iconv_t cd, char **restrict in, size_t *restrict inb, char **restri if (*outb < k) goto toobig; memcpy(*out, tmp, k); } else k = wctomb_utf8(*out, c); + /* This failure condition should be unreachable, but + * is included to prevent decoder bugs from translating + * into advancement outside the output buffer range. */ + if (k>4) goto ilseq; *out += k; *outb -= k; break; |