commit 87bbae14d6fe2bb0827a009de3a66f936d93016b
author Pali Rohár <pali.rohar@gmail.com> Sat Jun 21 14:01:30 2025 +0200
committer Martin Storsjö <martin@martin.st> Wed Jun 25 14:45:02 2025 +0300
tree 9cc4c669a140ecd65592c4af5c7be23a835f35a3
parent 9e34e7e8f2e08342195f066c66b8e58ea887a7b0

crt: Check for underflow in _lseeki64() and fsetpos() functions

Signed-off-by: Martin Storsjö <martin@martin.st>

mingw-w64-crt/stdio/_lseeki64.c

diff --git a/mingw-w64-crt/stdio/_lseeki64.c b/mingw-w64-crt/stdio/_lseeki64.c
index 2408a6c..6ead4a9 100644
--- a/mingw-w64-crt/stdio/_lseeki64.c
+++ b/mingw-w64-crt/stdio/_lseeki64.c
@@ -11,7 +11,7 @@
 /* Define 64-bit _lseeki64() function via 32-bit _lseek() function */
 __int64 __cdecl _lseeki64(int fd, __int64 offset, int whence)
 {
-  if (offset > LONG_MAX)
+  if (offset < LONG_MIN || offset > LONG_MAX)
   {
     errno = EOVERFLOW;
     return -1;

mingw-w64-crt/stdio/fsetpos.c

diff --git a/mingw-w64-crt/stdio/fsetpos.c b/mingw-w64-crt/stdio/fsetpos.c
index 1d3f032..4bb9e5c 100644
--- a/mingw-w64-crt/stdio/fsetpos.c
+++ b/mingw-w64-crt/stdio/fsetpos.c
@@ -14,7 +14,7 @@
 {
   long pos32;
 
-  if (*_Pos > LONG_MAX)
+  if (*_Pos < LONG_MIN || *_Pos > LONG_MAX)
   {
     errno = EOVERFLOW;
     return -1;