From 84deac219db1b0b8c9df53d9b81ac0b5ca7578e6 Mon Sep 17 00:00:00 2001 From: "H. Peter Anvin" Date: Mon, 17 Apr 2017 14:25:13 -0700 Subject: [PATCH] rdoff.c: one more unsafe use of fread() Use the same error pattern as the rest of the calls in this function. Signed-off-by: H. Peter Anvin --- rdoff/rdoff.c | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/rdoff/rdoff.c b/rdoff/rdoff.c index a015acdc..77fec399 100644 --- a/rdoff/rdoff.c +++ b/rdoff/rdoff.c @@ -275,7 +275,11 @@ int rdfopenhere(rdffile * f, FILE * fp, int *refcount, const char *name) f->fp = fp; initpos = ftell(fp); - fread(buf, 6, 1, f->fp); /* read header */ + /* read header */ + if (fread(buf, 1, 6, f->fp) != 6) { + fclose(f->fp); + return rdf_errno = RDF_ERR_READ; + } buf[6] = 0; if (strcmp(buf, RDOFFId)) { -- 2.11.4.GIT