Index | Thread | Search

From:
Theo Buehler <tb@theobuehler.org>
Subject:
Re: [PATCH] libressl: Fix integer overflow
To:
Kenjiro Nakayama <nakayamakenjiro@gmail.com>
Cc:
tech@openbsd.org
Date:
Wed, 26 Feb 2025 10:59:31 +0100

Download raw body.

Thread
On Wed, Feb 26, 2025 at 06:02:02PM +0900, Kenjiro Nakayama wrote:
> If the values a->length or ca->type is large, they could overflow,
> which would cause undefined behavior.

Committed, thanks.

I had similar fixes for obj_dat.c in one of my trees, I think this was
prompted by Coverity, but I don't remember for sure. If you did find it
using Coverity, it would be nice to include the CID.