libbb: prevent resursion on malloc failure

Signed-off-by: Denys Vlasenko <vda.linux@googlemail.com>

diff --git a/libbb/verror_msg.c b/libbb/verror_msg.c
index 58846d56ed1bd6c8d788fcacc2b4ec0bbf317f0e..506b9066a905ac8d6fe6d00fc32baac7e05e722e 100644 (file)
--- a/libbb/verror_msg.c
+++ b/libbb/verror_msg.c
@@ -15,7 +15,7 @@ const char *msg_eol = "\n";
 
 void FAST_FUNC bb_verror_msg(const char *s, va_list p, const char* strerr)
 {
-       char *msg;
+       char *msg, *msg1;
        int applet_len, strerr_len, msgeol_len, used;
 
        if (!logmode)
@@ -36,27 +36,36 @@ void FAST_FUNC bb_verror_msg(const char *s, va_list p, const char* strerr)
        applet_len = strlen(applet_name) + 2; /* "applet: " */
        strerr_len = strerr ? strlen(strerr) : 0;
        msgeol_len = strlen(msg_eol);
+       /* can't use xrealloc: it calls error_msg on failure,
+        * that may result in a recursion */
        /* +3 is for ": " before strerr and for terminating NUL */
-       msg = xrealloc(msg, applet_len + used + strerr_len + msgeol_len + 3);
-       /* TODO: maybe use writev instead of memmoving? Need full_writev? */
-       memmove(msg + applet_len, msg, used);
-       used += applet_len;
-       strcpy(msg, applet_name);
-       msg[applet_len - 2] = ':';
-       msg[applet_len - 1] = ' ';
-       if (strerr) {
-               if (s[0]) { /* not perror_nomsg? */
-                       msg[used++] = ':';
-                       msg[used++] = ' ';
+       msg1 = realloc(msg, applet_len + used + strerr_len + msgeol_len + 3);
+       if (!msg1) {
+               msg[used++] = '\n'; /* overwrites NUL */
+               applet_len = 0;
+       } else {
+               msg = msg1;
+               /* TODO: maybe use writev instead of memmoving? Need full_writev? */
+               memmove(msg + applet_len, msg, used);
+               used += applet_len;
+               strcpy(msg, applet_name);
+               msg[applet_len - 2] = ':';
+               msg[applet_len - 1] = ' ';
+               if (strerr) {
+                       if (s[0]) { /* not perror_nomsg? */
+                               msg[used++] = ':';
+                               msg[used++] = ' ';
+                       }
+                       strcpy(&msg[used], strerr);
+                       used += strerr_len;
                }
-               strcpy(&msg[used], strerr);
-               used += strerr_len;
+               strcpy(&msg[used], msg_eol);
+               used += msgeol_len;
        }
-       strcpy(&msg[used], msg_eol);
 
        if (logmode & LOGMODE_STDIO) {
                fflush(stdout);
-               full_write(STDERR_FILENO, msg, used + msgeol_len);
+               full_write(STDERR_FILENO, msg, used);
        }
        if (logmode & LOGMODE_SYSLOG) {
                syslog(LOG_ERR, "%s", msg + applet_len);