Page MenuHomeFreeBSD

D29752.diff
No OneTemporary

D29752.diff

diff --git a/sys/kern/subr_sbuf.c b/sys/kern/subr_sbuf.c
--- a/sys/kern/subr_sbuf.c
+++ b/sys/kern/subr_sbuf.c
@@ -266,6 +266,10 @@
KASSERT(error != NULL,
("%s called with NULL error pointer", __func__));
+ if (uio->uio_resid >= INT_MAX || uio->uio_resid < SBUF_MINSIZE - 1) {
+ *error = EINVAL;
+ return (NULL);
+ }
s = sbuf_new(s, NULL, uio->uio_resid + 1, 0);
if (s == NULL) {
*error = ENOMEM;

File Metadata

Mime Type
text/plain
Expires
Thu, Apr 24, 2:11 PM (16 h, 20 m)
Storage Engine
blob
Storage Format
Raw Data
Storage Handle
17760363
Default Alt Text
D29752.diff (417 B)

Event Timeline