Fix code scanning alert no. 8760: Size computation for allocation may…

… overflow Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com> Signed-off-by: Yusuke Kato <[email protected]>
vdaas · Dec 9, 2024 · 00bf13b · 00bf13b
1 parent 48a71cd
commit 00bf13b
Showing 1 changed file with 6 additions and 1 deletion.
diff --git a/hack/docker/gen/main.go b/hack/docker/gen/main.go
@@ -1023,7 +1023,12 @@ jobs:
 			// remove the double quotation marks from the generated key "on": (note that the word "on" is a reserved word in sigs.k8s.io/yaml)
 			workflowYaml := strings.Replace(string(workflowYamlTmp), "\"on\":", "on:", 1)
 
-			buf := bytes.NewBuffer(make([]byte, 0, len(header)+len(workflowYaml)))
+			totalLen := len(header) + len(workflowYaml)
+			if totalLen < len(header) || totalLen < len(workflowYaml) {
+				return fmt.Errorf("size computation for allocation may overflow")
+			}
+
+			buf := bytes.NewBuffer(make([]byte, 0, totalLen))
 			err = license.Execute(buf, data)
 			if err != nil {
 				return fmt.Errorf("error executing template: %w", err)