CVSROOT:        /cvs
Module name:    src
Changes by:     [email protected] 2019/03/04 00:09:55

Modified files:
        sys/kern       : uipc_syscalls.c 

Log message:
Yet another (unsigned) cast who's only purpose is to incorrectly truncate
a size_t. Multiply-overflow is checked beforehands.  If this could (it can't)
validly be more than 4GB, the (unsigned) is a truncation and causes copyin of
insufficient data, without indicating error...
ok claudio

Reply via email to