diff options
| author | cperciva <cperciva@FreeBSD.org> | 2006-08-13 21:54:47 +0000 |
|---|---|---|
| committer | cperciva <cperciva@FreeBSD.org> | 2006-08-13 21:54:47 +0000 |
| commit | 230593e64f2ac3d2fa66e8760e14267f14f2b14a (patch) | |
| tree | 736ba4df0ca49aaff077b74a656362848da88172 /lib/libc/stdlib/imaxabs.c | |
| parent | 1ca146c4506ba4101ebba61a4cc126f023c1ee2f (diff) | |
| download | FreeBSD-src-230593e64f2ac3d2fa66e8760e14267f14f2b14a.zip FreeBSD-src-230593e64f2ac3d2fa66e8760e14267f14f2b14a.tar.gz | |
Correctly handle the case in calloc(num, size) where
(size_t)(num * size) == 0
but both num and size are nonzero.
Reported by: Ilja van Sprundel
Approved by: jasone
Security: Integer overflow; calloc was allocating 1 byte in
response to a request for a multiple of 2^32 (or 2^64)
bytes instead of returning NULL.
Diffstat (limited to 'lib/libc/stdlib/imaxabs.c')
0 files changed, 0 insertions, 0 deletions
