add length checks to format::Info array params

Author: jnqnfe

pulse-binding/CHANGELOG.md

@@ -8,6 +8,9 @@
  * Dropped deprecated `CardProfileInfo2` introspection alias.
  * Added `set_corked_state()` method to `Stream` providing an alternative to using `cork()` and
    `uncork()`.
+ * Added length checks to the `set_prop_int_array()` and `set_prop_string_array()` methods of
+   `format::Info`. Now should you happen to pass in an array with a length larger than can fit
+   within the `len` parameter of the C function, it will panic.
 
 # 2.29.0 (March 3rd, 2025)
 

pulse-binding/src/format.rs

@@ -497,7 +497,10 @@ impl Info {
     }
 
     /// Sets a property with a list of integer values.
+    ///
+    /// Panics if length of array is larger than `i32::MAX`.
     pub fn set_prop_int_array(&mut self, key: &str, values: &[i32]) {
+        assert!(values.len() <= i32::MAX as u32);
         // Warning: New CStrings will be immediately freed if not bound to a variable, leading to
         // as_ptr() giving dangling pointers!
         let c_key = CString::new(key).unwrap();
@@ -525,7 +528,10 @@ impl Info {
     }
 
     /// Sets a property with a list of string values.
+    ///
+    /// Panics if length of array is larger than `i32::MAX`.
     pub fn set_prop_string_array(&mut self, key: &str, values: &[&str]) {
+        assert!(values.len() <= i32::MAX as u32);
         // Warning: New CStrings will be immediately freed if not bound to a variable, leading to
         // as_ptr() giving dangling pointers!
         let c_key = CString::new(key).unwrap();