tdb: Make sure the hash size fits

Signed-off-by: Volker Lendecke <vl@samba.org>
Reviewed-by: Jeremy Allison <jra@samba.org>

diff --git a/lib/tdb/common/open.c b/lib/tdb/common/open.c
index cfb476d2385fe8ddfdfa28672d10d9f292b8ab7b..8baa7e40de0aea2c1dcfaaf5cf7c162ef3f8b8e1 100644 (file)
--- a/lib/tdb/common/open.c
+++ b/lib/tdb/common/open.c
@@ -687,6 +687,21 @@ _PUBLIC_ struct tdb_context *tdb_open_ex(const char *name, int hash_size, int td
                }
        }
 
+       if (tdb->hash_size > UINT32_MAX/4) {
+               TDB_LOG((tdb, TDB_DEBUG_FATAL, "tdb_open_ex: "
+                        "hash size %"PRIu32" too large\n", tdb->hash_size));
+               errno = EINVAL;
+               goto fail;
+       }
+
+       ret = tdb->methods->tdb_oob(tdb, FREELIST_TOP, 4*tdb->hash_size, 1);
+       if (ret == -1) {
+               TDB_LOG((tdb, TDB_DEBUG_FATAL, "tdb_open_ex: "
+                        "hash size %"PRIu32" does not fit\n", tdb->hash_size));
+               errno = EINVAL;
+               goto fail;
+       }
+
        if (locked) {
                if (tdb_nest_unlock(tdb, ACTIVE_LOCK, F_WRLCK, false) == -1) {
                        TDB_LOG((tdb, TDB_DEBUG_ERROR, "tdb_open_ex: "