Apply a security patch for ICU regex. (http://bugs.icu-project.org/trac/ticke...

third_party/icu38/source/common/uvectr32.h

 /*
 **********************************************************************
-*   Copyright (C) 1999-2006, International Business Machines
+*   Copyright (C) 1999-2008, International Business Machines
 *   Corporation and others.  All Rights Reserved.
 **********************************************************************
 */
 
 //
 //  UVector32 is a class implementing a vector of 32 bit integers.
 //            It is similar to UVector, but holds int32_t values rather than pointers.
 //            Most of the code is unchanged from UVector.
 //
 
@@ skipping 40 matching lines @@
  *
  * <p>Improve the handling of index out of bounds errors.
  *
  * @author Alan Liu
  */
 class U_COMMON_API UVector32 : public UObject {
 private:
     int32_t   count;
 
     int32_t   capacity;
+    
+    int32_t   maxCapacity;   // Limit beyond which capacity is not permitted to grow.
 
     int32_t*  elements;
 
 public:
     UVector32(UErrorCode &status);
 
     UVector32(int32_t initialCapacity, UErrorCode &status);
 
     virtual ~UVector32();
 
@@ skipping 81 matching lines @@
      * The current elements are assumed to be sorted already.
      */
     void sortedInsert(int32_t elem, UErrorCode& ec);
 
     /**
      * Returns a pointer to the internal array holding the vector.
      */
     int32_t *getBuffer() const;
 
     /**
+     * Set the maximum allowed buffer capacity for this vector/stack.
+     * Default with no limit set is unlimited, go until malloc() fails.
+     * A Limit of zero means unlimited capacity.
+     * Units are vector elements (32 bits each), not bytes.
+     */
+    void setMaxCapacity(int32_t limit);
+
+    /**
      * ICU "poor man's RTTI", returns a UClassID for this class.
      */
     static UClassID U_EXPORT2 getStaticClassID();
 
     /**
      * ICU "poor man's RTTI", returns a UClassID for the actual class.
      */
     virtual UClassID getDynamicClassID() const;
 
 private:
@@ skipping 39 matching lines @@
 
 
 inline void UVector32::addElement(int32_t elem, UErrorCode &status) {
     if (ensureCapacity(count + 1, status)) {
         elements[count] = elem;
         count++;
     }
 }
 
 inline int32_t *UVector32::reserveBlock(int32_t size, UErrorCode &status) {
-    ensureCapacity(count+size, status);
+    if (ensureCapacity(count+size, status) == FALSE) {
+        return NULL;
+    }
     int32_t  *rp = elements+count;
     count += size;
     return rp;
 }
 
 inline int32_t *UVector32::popFrame(int32_t size) {
     U_ASSERT(count >= size);
     count -= size;
     if (count < 0) {
         count = 0;
@@ skipping 48 matching lines @@
     if (count > 0) {
         count--;
         result = elements[count];
     }
     return result;
 }
 
 U_NAMESPACE_END
 
 #endif