diff options
| author | jlemon <jlemon@FreeBSD.org> | 2001-02-27 00:50:20 +0000 |
|---|---|---|
| committer | jlemon <jlemon@FreeBSD.org> | 2001-02-27 00:50:20 +0000 |
| commit | d94b169a99b68569915f7a841deb861f540bbba0 (patch) | |
| tree | d40c72979e665f02f2bd2087b703444435d388ad /sys/kern/sys_generic.c | |
| parent | 56ff8b21306b7ea2a31f62cd08e1d70f0d1b8fc0 (diff) | |
| download | FreeBSD-src-d94b169a99b68569915f7a841deb861f540bbba0.zip FreeBSD-src-d94b169a99b68569915f7a841deb861f540bbba0.tar.gz | |
Cast nfds to u_int before range checking it in order to catch negative
values.
PR: 25393
Diffstat (limited to 'sys/kern/sys_generic.c')
| -rw-r--r-- | sys/kern/sys_generic.c | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/sys/kern/sys_generic.c b/sys/kern/sys_generic.c index 91687aa..0235e89 100644 --- a/sys/kern/sys_generic.c +++ b/sys/kern/sys_generic.c @@ -869,7 +869,8 @@ poll(p, uap) * least enough for the current limits. We want to be reasonably * safe, but not overly restrictive. */ - if (nfds > p->p_rlimit[RLIMIT_NOFILE].rlim_cur && nfds > FD_SETSIZE) + if ((u_int)nfds > p->p_rlimit[RLIMIT_NOFILE].rlim_cur && + (u_int)nfds > FD_SETSIZE) return (EINVAL); ni = nfds * sizeof(struct pollfd); if (ni > sizeof(smallbits)) |
