pubkey-speed: Add sanity check for the number of rounds

The allocated buffer for the signatures is based on this, which LGTM
doesn't like.

diff --git a/scripts/pubkey_speed.c b/scripts/pubkey_speed.c
index 83ab4e41b0e6b4951dd47c24f56f4a1c3cbf6fe5..21e4d2c1ef8d6f8c51cb6bc9f9270d42fa42b044 100644 (file)
--- a/scripts/pubkey_speed.c
+++ b/scripts/pubkey_speed.c
@@ -56,6 +56,10 @@ int main(int argc, char *argv[])
        }
 
        rounds = atoi(argv[3]);
+       if (rounds < 0 || rounds > (2^26))
+       {       /* arbitrary limit to the number of chunk_t/sigs that fit into 1 GiB */
+               usage();
+       }
 
        if (streq(argv[2], "rsa"))
        {