Add two assert()s.

diff --git a/src/connection.c b/src/connection.c
index b7b9d683d6e6840af314dc2d87a4a049f06aa050..2875b768b90ccf71714d03124f41c0de9fbe721c 100644 (file)
--- a/src/connection.c
+++ b/src/connection.c
@@ -23,6 +23,7 @@
 
 #include <assert.h>
 #include <errno.h>
+#include <limits.h>
 #include <netdb.h>
 #include <poll.h>
 #include <unistd.h>
@@ -528,6 +529,7 @@ static int read_http_request(FILE *client_fd, char *request, size_t length) {
     char buffer[MAX_REQUEST_LINE];
     int found_proxy_authorization;
 
+    assert(length <= INT_MAX);
     if (fgets(request, (int)length, client_fd) == NULL) {
         if (ferror(client_fd)) {
             LOG_PERROR(WARNING, "read_http_request(): fgets()");

diff --git a/src/verify.c b/src/verify.c
index d4002764dbfece338008632c794ce226dade233c..f6742361f3e9d111a4bc779c246a10d11914a6fe 100644 (file)
--- a/src/verify.c
+++ b/src/verify.c
@@ -20,6 +20,7 @@
 #include "tlsproxy.h"
 #include "verify.h"
 
+#include <assert.h>
 #include <errno.h>
 
 #include <gnutls/x509.h>
@@ -180,6 +181,7 @@ static int get_certificate_path(const char *format,
     int result;
 
     /* Hostname too long. */
+    assert(size > strlen(format));
     if (size - strlen(format) <= strlen(hostname)) {
         LOG(WARNING,
             "get_certificate_path(): hostname too long: '%s'",