Secure parsing of WEBKIT_WPE_BMALLOC_MICROSECONDS_SLEEP env var

WebPlatformForEmbedded · Dec 16, 2024 · 736795d · 736795d
1 parent 3ff7751
commit 736795d
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/Source/bmalloc/bmalloc/Mutex.cpp b/Source/bmalloc/bmalloc/Mutex.cpp
@@ -31,6 +31,7 @@
 #include <mach/mach_traps.h>
 #include <mach/thread_switch.h>
 #endif
+#include <cstring>
 #include <thread>
 #include <unistd.h>
 
@@ -46,7 +47,8 @@ static inline void yield()
     static std::once_flag onceFlag;
     std::call_once(onceFlag, [] {
         const char* env = getenv("WEBKIT_WPE_BMALLOC_MICROSECONDS_SLEEP");
-        if (env) {
+        const auto envLen = strlen(env);
+        if (env && envLen <= 5 && env[envLen] == '\0') {
             int value;
             if (sscanf(env, "%d", &value) == 1 && value > 0)
                 bmallocMicrosecondsSleep = value;