Re: off by one bounds

From: Maxim Konovalov (maxim_at_macomnet.ru)
Date: 08/21/04

  • Next message: Maxim Konovalov: "Re: off by one bounds" 
    Date: Sat, 21 Aug 2004 13:19:44 +0400 (MSD)
To: Skip Ford <skip.ford@verizon.net>

    On Sat, 21 Aug 2004, 05:00-0400, Skip Ford wrote:

    > Maxim Konovalov wrote:
    > > On Fri, 20 Aug 2004, 12:36-0700, Ted Unangst wrote:
    > >
    > >> errors in freebsd 4.10 found by Coverity's analysis.
    > >
    > >> ip_icmp.c:ip_next_mtu, i == sizeof, dir >= 0
    > >
    > > If i == sizeof then mtutab[i] == 0
    >
    > If "i == sizeof" then mtutab[i] is out of bounds, off by one.
    > There is no mtutab[sizeof mtutab / sizeof mtutab[0]].
    >
    > This isn't specific to RELENG_4

    Ah, yes, sorry. 

    -- 
Maxim Konovalov
_______________________________________________
freebsd-hackers@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-hackers
To unsubscribe, send any mail to "freebsd-hackers-unsubscribe@freebsd.org"
  • Next message: Maxim Konovalov: "Re: off by one bounds"