Re: [OE-core] [PATCH] openssh: fix potential signed overflow in pointer arithmatic

2019-06-16 Thread Hongxu Jia
On 6/17/19 10:17 AM, Hongxu Jia wrote: Pointer arithmatic results in implementation defined signed integer type, so that 'd - dst’ in strlcat may trigger signed overflow if pointer ‘d’ is near 0x7fff in 32 bits system. In case of ompilation by gcc or clang with -ftrapv option, the overflow wo

[OE-core] [PATCH] openssh: fix potential signed overflow in pointer arithmatic

2019-06-16 Thread Hongxu Jia
Pointer arithmatic results in implementation defined signed integer type, so that 'd - dst’ in strlcat may trigger signed overflow if pointer ‘d’ is near 0x7fff in 32 bits system. In case of ompilation by gcc or clang with -ftrapv option, the overflow would generate program abort. Signed-off-b