pts: Avoid integer overflow when reading file names in the old IMA format

diff --git a/src/libpts/pts/pts_ima_event_list.c b/src/libpts/pts/pts_ima_event_list.c
index 9959fb3b381fec45ba068cff0de038b0c8c32ce6..9bff4654b8fe35dc257476dc0cfd262260b51fb4 100644 (file)
--- a/src/libpts/pts/pts_ima_event_list.c
+++ b/src/libpts/pts/pts_ima_event_list.c
@@ -298,7 +298,7 @@ pts_ima_event_list_t* pts_ima_event_list_create(char *file)
                        }
 
                        /* read the 32 bit length of the file name in host order */
-                       if (read(fd, &name_len, 4) != 4)
+                       if (read(fd, &name_len, 4) != 4 || name_len == UINT32_MAX)
                        {
                                error = "invalid filename field length";
                                break;