diff options
| author | Alan Mishchenko <alanmi@berkeley.edu> | 2014-09-28 12:17:02 -0700 |
|---|---|---|
| committer | Alan Mishchenko <alanmi@berkeley.edu> | 2014-09-28 12:17:02 -0700 |
| commit | 0c070a35e5d8ec5dceae5e3f4f5a72e95a0e392d (patch) | |
| tree | 28f40b67a679369be233efba9761a2616dbfac03 /src | |
| parent | 98e377bdfff98a99f4c765a52cfa8023b4f0eb60 (diff) | |
| download | abc-0c070a35e5d8ec5dceae5e3f4f5a72e95a0e392d.tar.gz abc-0c070a35e5d8ec5dceae5e3f4f5a72e95a0e392d.tar.bz2 abc-0c070a35e5d8ec5dceae5e3f4f5a72e95a0e392d.zip | |
Adding out-of-bounds checks to AIGER readers.
Diffstat (limited to 'src')
| -rw-r--r-- | src/aig/gia/giaAiger.c | 2 | ||||
| -rw-r--r-- | src/base/io/ioReadAiger.c | 2 |
2 files changed, 2 insertions, 2 deletions
diff --git a/src/aig/gia/giaAiger.c b/src/aig/gia/giaAiger.c index 2f2cab2b..cbcaf856 100644 --- a/src/aig/gia/giaAiger.c +++ b/src/aig/gia/giaAiger.c @@ -369,7 +369,7 @@ Gia_Man_t * Gia_AigerReadFromMemory( char * pContents, int nFileSize, int fSkipS // read signal names if they are of the special type pCur = pSymbols; - if ( *pCur != 'c' ) + if ( pCur < (unsigned char *)pContents + nFileSize && *pCur != 'c' ) { int fBreakUsed = 0; unsigned char * pCurOld = pCur; diff --git a/src/base/io/ioReadAiger.c b/src/base/io/ioReadAiger.c index ab865326..1d9ca877 100644 --- a/src/base/io/ioReadAiger.c +++ b/src/base/io/ioReadAiger.c @@ -477,7 +477,7 @@ Abc_Ntk_t * Io_ReadAiger( char * pFileName, int fCheck ) // read the names if present pCur = pSymbols; - if ( *pCur != 'c' ) + if ( pCur < pContents + nFileSize && *pCur != 'c' ) { int Counter = 0; while ( pCur < pContents + nFileSize && *pCur != 'c' ) |