chiark / gitweb /
sd-bus: check for potential integer overflow in KDBUS_ITEM_FOREACH()
authorDaniel Mack <zonque@gmail.com>
Sat, 8 Mar 2014 13:18:48 +0000 (14:18 +0100)
committerDaniel Mack <zonque@gmail.com>
Sat, 8 Mar 2014 13:18:48 +0000 (14:18 +0100)
commitb629d0984206ad855cc0cb7e6a376c919f7bf366
tree0df3316c68ea670e6efbfc8f19186907a17f39b7
parent2a781fc9bd33982c81e5ff75974a442a33d4f167
sd-bus: check for potential integer overflow in KDBUS_ITEM_FOREACH()

For large values of item->size, the 'part' pointer can wrap around,
which results in an illegal pointer, but currently passes the for-loop
condition.
src/libsystemd/sd-bus/bus-kernel.h