From: Theo Buehler Subject: Re: [PATCH] libressl: Fix integer overflow To: Kenjiro Nakayama Cc: tech@openbsd.org Date: Wed, 26 Feb 2025 10:59:31 +0100 On Wed, Feb 26, 2025 at 06:02:02PM +0900, Kenjiro Nakayama wrote: > If the values a->length or ca->type is large, they could overflow, > which would cause undefined behavior. Committed, thanks. I had similar fixes for obj_dat.c in one of my trees, I think this was prompted by Coverity, but I don't remember for sure. If you did find it using Coverity, it would be nice to include the CID.