Merge pull request commonmark#326 from kevinbackhouse/fuzz-quadratic-…

…brackets-overflow Fix bug in fuzz harness
swiftlang · Apr 5, 2023 · ef63acf · ef63acf
2 parents 2aad29d + f6e3ee1
commit ef63acf
Showing 1 changed file with 5 additions and 3 deletions.
diff --git a/fuzz/fuzz_quadratic_brackets.c b/fuzz/fuzz_quadratic_brackets.c
@@ -75,9 +75,11 @@ int LLVMFuzzerTestOneInput(const uint8_t* data, size_t size) {
           }
           offset += fuzz_config.closelen;
         }
-        memcpy(&markdown[markdown_size], &markdown0[offset],
-               endlen);
-        markdown_size += endlen;
+        if (markdown_size + endlen <= sizeof(markdown)) {
+          memcpy(&markdown[markdown_size], &markdown0[offset],
+                 endlen);
+          markdown_size += endlen;
+        }
       } else {
         markdown_size = markdown_size0;
         memcpy(markdown, markdown0, markdown_size);