From: "Theo de Raadt" Subject: Re: usr.bin/patch: use strtonum instead of atoi() To: Omar Polo Cc: Alexander Bluhm , tech@openbsd.org Date: Thu, 29 Aug 2024 16:04:16 -0600 Omar Polo wrote: > On 2024/08/29 11:00:14 -0600, "Theo de Raadt" wrote: > > The bounds are pretty high, but it looks reasonable. > > my other idea was to use 10000, would it be preferred? It's difficult > to come up with tight bounds here, nor desiderable, but yeah, INT_MAX > is way too much. 10k should be still way, wayyy more than needed but > still far away from INT_MAX to avoid overflows. Right now it is INT_MAX, so it should stay the same.