elf: Fix use-after-free in ldconfig [BZ #26779]
[glibc.git] / string / argz-insert.c
blob819f1b121ef8b295b6ec85103821ff760c2817e1
1 /* Routines for dealing with '\0' separated arg vectors.
2 Copyright (C) 1995-2022 Free Software Foundation, Inc.
3 This file is part of the GNU C Library.
5 The GNU C Library is free software; you can redistribute it and/or
6 modify it under the terms of the GNU Lesser General Public
7 License as published by the Free Software Foundation; either
8 version 2.1 of the License, or (at your option) any later version.
10 The GNU C Library is distributed in the hope that it will be useful,
11 but WITHOUT ANY WARRANTY; without even the implied warranty of
12 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
13 Lesser General Public License for more details.
15 You should have received a copy of the GNU Lesser General Public
16 License along with the GNU C Library; if not, see
17 <https://www.gnu.org/licenses/>. */
19 #include <argz.h>
20 #include <string.h>
21 #include <stdlib.h>
23 /* Insert ENTRY into ARGZ & ARGZ_LEN before BEFORE, which should be an
24 existing entry in ARGZ; if BEFORE is NULL, ENTRY is appended to the end.
25 Since ARGZ's first entry is the same as ARGZ, argz_insert (ARGZ, ARGZ_LEN,
26 ARGZ, ENTRY) will insert ENTRY at the beginning of ARGZ. If BEFORE is not
27 in ARGZ, EINVAL is returned, else if memory can't be allocated for the new
28 ARGZ, ENOMEM is returned, else 0. */
29 error_t
30 __argz_insert (char **argz, size_t *argz_len, char *before, const char *entry)
32 if (! before)
33 return __argz_add (argz, argz_len, entry);
35 if (before < *argz || before >= *argz + *argz_len)
36 return EINVAL;
38 if (before > *argz)
39 /* Make sure before is actually the beginning of an entry. */
40 while (before[-1])
41 before--;
44 size_t after_before = *argz_len - (before - *argz);
45 size_t entry_len = strlen (entry) + 1;
46 size_t new_argz_len = *argz_len + entry_len;
47 char *new_argz = realloc (*argz, new_argz_len);
49 if (new_argz)
51 before = new_argz + (before - *argz);
52 memmove (before + entry_len, before, after_before);
53 memmove (before, entry, entry_len);
54 *argz = new_argz;
55 *argz_len = new_argz_len;
56 return 0;
58 else
59 return ENOMEM;
62 weak_alias (__argz_insert, argz_insert)