commit 547879603df38798739a21aaeb45dcb8cd0c8e78
author Brian Silverman <brians> Sat Dec 28 22:31:16 2013 -0800
committer Brian Silverman <brians> Sat Dec 28 22:31:16 2013 -0800
tree 4dd806dd4949a4d1ee6aa12d179095543577ed79
parent c82c51233675922827cbf4c19f16d1a4cf269334

added a check for destination overflow when unstuffing

bbb_cape/src/cape/cows.c

diff --git a/bbb_cape/src/cape/cows.c b/bbb_cape/src/cape/cows.c
index cdabaac..b896fd7 100644
--- a/bbb_cape/src/cape/cows.c
+++ b/bbb_cape/src/cape/cows.c
@@ -35,7 +35,8 @@
 }
 
 uint32_t cows_unstuff(const uint32_t *__restrict__ source, size_t source_length,
-                      uint32_t *__restrict__ destination) {
+                      uint32_t *__restrict__ destination,
+                      size_t destination_length) {
   size_t source_index = 0;
   size_t destination_index = 0;
   uint32_t code;
@@ -50,9 +51,11 @@
 
     for (uint32_t i = 1; i < code; ++i) {
       destination[destination_index++] = source[source_index++];
+      if (destination_index > destination_length / 4) return 0;
     }
     if (code != UINT32_MAX && source_index != source_length / 4) {
       destination[destination_index++] = 0;
+      if (destination_index > destination_length / 4) return 0;
     }
   }
   return destination_index;