https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=209661
--- Comment #2 from CTurt <ct...@hardenedbsd.org> --- Sorry, I made a mistake in my report; the bound check is incorrect, as described, however, no negative array index will occur from this since an unsigned comparison is used in the loop. The impact is simply that `0` will be returned instead of `EINVAL`. This patch is good because unsigned is more appropriate for `i`, however it doesn't fix the bug. An additional patch should be applied to validate user arguments more effectively than the current bound check, so that the arguments I posted originally will no longer be accepted. -- You are receiving this mail because: You are the assignee for the bug. _______________________________________________ freebsd-bugs@freebsd.org mailing list https://lists.freebsd.org/mailman/listinfo/freebsd-bugs To unsubscribe, send any mail to "freebsd-bugs-unsubscr...@freebsd.org"
