path: root/trailer.c
diff options
authorJeff King <>2018-08-23 00:45:44 (GMT)
committerJunio C Hamano <>2018-08-23 17:08:51 (GMT)
commita3b636e21574e6cff1494e0a84644e06201ddb8d (patch)
treeb7587477affaebe30612e6c7667d4fe7e1e30be1 /trailer.c
parent0d2db00e24ee2df4459151c5ba6de9306e30e727 (diff)
trailer: use size_t for iterating trailer list
We store the length of the trailers list in a size_t. So on a 64-bit system with a 32-bit int, in the unlikely case that we manage to actually allocate a list with 2^31 entries, we'd loop forever trying to iterate over it (our "int" would wrap to negative before exceeding info->trailer_nr). This probably doesn't matter in practice. Each entry is at least a pointer plus a non-empty string, so even without malloc overhead or the memory to hold the original string we're parsing from, you'd need to allocate tens of gigabytes. But it's easy enough to do it right. Signed-off-by: Jeff King <> Signed-off-by: Junio C Hamano <>
Diffstat (limited to 'trailer.c')
1 files changed, 3 insertions, 3 deletions
diff --git a/trailer.c b/trailer.c
index 88b35b8..40eef88 100644
--- a/trailer.c
+++ b/trailer.c
@@ -948,7 +948,7 @@ static size_t process_input_file(FILE *outfile,
struct trailer_info info;
struct strbuf tok = STRBUF_INIT;
struct strbuf val = STRBUF_INIT;
- int i;
+ size_t i;
trailer_info_get(&info, str);
@@ -1112,7 +1112,7 @@ void trailer_info_get(struct trailer_info *info, const char *str)
void trailer_info_release(struct trailer_info *info)
- int i;
+ size_t i;
for (i = 0; i < info->trailer_nr; i++)
@@ -1122,7 +1122,7 @@ static void format_trailer_info(struct strbuf *out,
const struct trailer_info *info,
const struct process_trailer_options *opts)
- int i;
+ size_t i;
/* If we want the whole block untouched, we can take the fast path. */
if (!opts->only_trailers && !opts->unfold) {