Re: off by one bounds

From: Skip Ford (skip.ford_at_verizon.net)
Date: 08/21/04

  • Next message: Maxim Konovalov: "Re: off by one bounds" 
    Date: Sat, 21 Aug 2004 05:00:01 -0400
To: Maxim Konovalov <maxim@macomnet.ru>

    Maxim Konovalov wrote:
    > On Fri, 20 Aug 2004, 12:36-0700, Ted Unangst wrote:
    >
    >> errors in freebsd 4.10 found by Coverity's analysis.
    >
    >> ip_icmp.c:ip_next_mtu, i == sizeof, dir >= 0
    >
    > If i == sizeof then mtutab[i] == 0

    If "i == sizeof" then mtutab[i] is out of bounds, off by one.
    There is no mtutab[sizeof mtutab / sizeof mtutab[0]].

    This isn't specific to RELENG_4. 

    -- 
Skip
_______________________________________________
freebsd-hackers@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-hackers
To unsubscribe, send any mail to "freebsd-hackers-unsubscribe@freebsd.org"
  • Next message: Maxim Konovalov: "Re: off by one bounds"

    Relevant Pages