diff options
| author | alfred <alfred@FreeBSD.org> | 2001-02-26 09:07:55 +0000 |
|---|---|---|
| committer | alfred <alfred@FreeBSD.org> | 2001-02-26 09:07:55 +0000 |
| commit | ead0072315c6f8c5d9242385cd07b56512a8ba34 (patch) | |
| tree | e0bd7be330f90e9b2544a366c1593dcd522c966f /lib/libc/stdio/tmpfile.c | |
| parent | 9f97905571442c98ead0c97ddd37e19c3af04024 (diff) | |
| download | FreeBSD-src-ead0072315c6f8c5d9242385cd07b56512a8ba34.zip FreeBSD-src-ead0072315c6f8c5d9242385cd07b56512a8ba34.tar.gz | |
Santize a size variable passed to kernel malloc.
Since we know there's always an upper bound we force that bound,
otherwise users can cause a panic via malloc getting hit with a
odd (huge or negative) amount of memory to allocate.
Tested by: kris
Pointed out by: Andrey Valyaev <dron@infosec.ru>
Diffstat (limited to 'lib/libc/stdio/tmpfile.c')
0 files changed, 0 insertions, 0 deletions
