integer and buffer overflows: introduce a number of asserts

[secnet.git] / conffile.fl

diff --git a/conffile.fl b/conffile.fl
index c169b572e8a54beae15d7d368f9d5dbc519de78f..b375f3b5851c17a45c673ee06396d430b462fae5 100644 (file)
--- a/conffile.fl
+++ b/conffile.fl
@@ -3,8 +3,11 @@
 
 %option nounput
 %option noinput
+%option never-interactive
 
 %{
+#include <assert.h>
+#include <limits.h>
 #include <stdio.h>
 #include <stdlib.h>
 #include <string.h>
@@ -99,6 +102,7 @@ include                      BEGIN(incl);
        Message(M_FATAL,"config file %s line %d: %s\n",config_file,
                config_lineno,"``include'' requires a filename");
        BEGIN(INITIAL);
+       assert(config_lineno < INT_MAX);
        ++config_lineno;
        ++yynerrs;
 }