Potential Integer Overflow vulnerability in src/ctjhai/minimum-weight.c

[KSB21ST]

Hi,
It seems that there exists a potential integer overflow. Please find the following description:

1. M->cols can be an arbitrary large number
   

   guava/src/ctjhai/minimum-weight.c

   Line 147 in 685d1d5

   if ( fscanf(fptr, "%d %d %d\n", &M->rows, &M->cols, &M->q) < 0 ) {

2. Call to malloc with the large integer can cause a memory allocation with an overflowed size
   

   guava/src/ctjhai/minimum-weight.c

   Line 152 in 685d1d5

   M->m[i] = (unsigned int *)malloc(M->cols * sizeof(unsigned int));

[osj1961]

Related to another issue where ctjhai's code returns wrong minimum distance results for codes with very long lengths. We should set and document a maximum length -- can switch to using long ints to allow for a pretty huge size -- and include a check before calling malloc (better yet, before even calling the C code).