summaryrefslogtreecommitdiff
path: root/sys/dev
diff options
context:
space:
mode:
authorriastradh <riastradh@NetBSD.org>2022-11-25 16:15:39 +0000
committerriastradh <riastradh@NetBSD.org>2022-11-25 16:15:39 +0000
commite0ee0bc32a6cd19392e4033852ca4885ed944323 (patch)
treed7cd64a3841aedcf86e17f359095627ba747512a /sys/dev
parent56d6f1861616181cae4ef0e7b780d5f3ca1eb5e0 (diff)
kern/vfs_lockf.c: Parenthesize to make arithmetic match check.
We verified start + (fl->fl_len - 1) would not overflow, but then computed (start + fl->fl_len) - 1 instead, and it is possible for start + fl->fl_len to overflow before we subtract 1. Reported-by: syzbot+762480b00cb14085f63a@syzkaller.appspotmail.com https://syzkaller.appspot.com/bug?id=d69313b2460a12715315f9f5f74fbe44b8bc38ba
Diffstat (limited to 'sys/dev')
0 files changed, 0 insertions, 0 deletions