cursor: Fix undefined behavior with huge names

If an index.theme contains a theme name which gets close to INT_MAX,
then creation of full path can lead to a signed integer overflow,
which is undefined behavior.

Fix this by turning one of the values to size_t. Easy solution for a
probably never occurring issue.

Signed-off-by: Tobias Stoeckmann <tobias@stoeckmann.org>

1 files changed, 1 insertions, 1 deletions

diff --git a/cursor/xcursor.c b/cursor/xcursor.c
index 2b6c47d..b852a1f 100644
--- a/cursor/xcursor.c
+++ b/cursor/xcursor.c
@@ -571,7 +571,7 @@ xcursor_build_theme_dir(const char *dir, const char *theme)
 	 * add space for any needed directory separators, one per component,
 	 * and one for the trailing null
 	 */
-	full_size = 1 + homelen + 1 + dirlen + 1 + themelen + 1;
+	full_size = (size_t) 1 + homelen + 1 + dirlen + 1 + themelen + 1;
 	full = malloc(full_size);
 	if (!full)
 		return NULL;