diff options
| author | dd <dd@FreeBSD.org> | 2001-09-10 11:36:08 +0000 |
|---|---|---|
| committer | dd <dd@FreeBSD.org> | 2001-09-10 11:36:08 +0000 |
| commit | afcc728682ca87b0c41d3b7e63d1ca05613c9f20 (patch) | |
| tree | b8d4aec29f844ee4271a6b1197409b35538af584 /sys/kern/kern_shutdown.c | |
| parent | bd6f9cb9b63e7a70079067566e50b59abc81ce16 (diff) | |
| download | FreeBSD-src-afcc728682ca87b0c41d3b7e63d1ca05613c9f20.zip FreeBSD-src-afcc728682ca87b0c41d3b7e63d1ca05613c9f20.tar.gz | |
Make the `nsops' variable in `semop' unsigned. This prevents an
overflow if uap->nsops (which is already unsigned) is over INT_MAX;
consequently, the bounds check below becomes valid. Previously, if a
value over INT_MAX was passed in uap->nsops, the bounds check wouldn't
catch it, and the value would be used to compute copyin()'s third
argument.
Obtained from: NetBSD
Diffstat (limited to 'sys/kern/kern_shutdown.c')
0 files changed, 0 insertions, 0 deletions
