diff options
| author |   tobias <tobias@openbsd.org> | 2019-05-03 16:31:34 +0000 |
|---|---|---|
| committer | tobias <tobias@openbsd.org> | 2019-05-03 16:31:34 +0000 |
| commit | dfe6885aac8e07aad460a3ee22c8affd9b255d72 (patch) | |
| tree | 752f69e6308e2f0b9f6cbfea33caf20937930f33 /usr.bin/tmux/cmd.c | |
| parent | In man(1) mode with a specific section requested, (diff) | |
| download | wireguard-openbsd-dfe6885aac8e07aad460a3ee22c8affd9b255d72.tar.xz wireguard-openbsd-dfe6885aac8e07aad460a3ee22c8affd9b255d72.zip | |
Fixed endless loop/ OOB write on 64 bit systems with large buffers.
If a buffer exceeds UINT_MAX (which is only possible on 64 bit systems)
an endless loop or OOB write can occur in buffer-specific readline
functions.
Switching variables in function scope to size_t solves these issue because
relevant fields in struct buffer are already size_t.
ok cheloha, deraadt, nicm, tedu
Diffstat (limited to 'usr.bin/tmux/cmd.c')
0 files changed, 0 insertions, 0 deletions