diff options
| author | Tobias Stoeckmann <tobias@cvs.openbsd.org> | 2019-05-03 16:31:35 +0000 |
|---|---|---|
| committer | Tobias Stoeckmann <tobias@cvs.openbsd.org> | 2019-05-03 16:31:35 +0000 |
| commit | f56c233d93cecf8d100afae2ddac753733e7ae50 (patch) | |
| tree | ce39265b2b74c48f13932717ec71266e62f04651 /usr.bin/tmux/cmd.c | |
| parent | b2812b78a9eb2403bd0a6c9188a1ff89616e94e7 (diff) | |
Fixed endless loop/ OOB write on 64 bit systems with large buffers.
If a buffer exceeds UINT_MAX (which is only possible on 64 bit systems)
an endless loop or OOB write can occur in buffer-specific readline
functions.
Switching variables in function scope to size_t solves these issue because
relevant fields in struct buffer are already size_t.
ok cheloha, deraadt, nicm, tedu
Diffstat (limited to 'usr.bin/tmux/cmd.c')
0 files changed, 0 insertions, 0 deletions