tiny sanity check on file size

1 files changed, 3 insertions, 1 deletions

diff --git a/src/lib/libc/stdlib/icdb.c b/src/lib/libc/stdlib/icdb.c
index 16d5300ab3..e33a043795 100644
--- a/src/lib/libc/stdlib/icdb.c
+++ b/src/lib/libc/stdlib/icdb.c
@@ -1,4 +1,4 @@
-/* $OpenBSD: icdb.c,v 1.3 2015/11/25 15:49:50 guenther Exp $ */
+/* $OpenBSD: icdb.c,v 1.4 2015/12/10 18:06:06 tedu Exp $ */
 /*
  * Copyright (c) 2015 Ted Unangst <tedu@openbsd.org>
  *
@@ -162,6 +162,8 @@ icdb_open(const char *name, int flags, uint32_t version)
                 return NULL;
         if (fstat(fd, &sb) != 0)
                 goto fail;
+        if (sb.st_size < sizeof(struct icdbinfo))
+                goto fail;
         ptr = mmap(NULL, sb.st_size, PROT_READ |
             ((flags & O_RDWR) ? PROT_WRITE : 0), MAP_SHARED, fd, 0);
         if (ptr == MAP_FAILED)