diff options
| author | riastradh <riastradh@NetBSD.org> | 2022-11-25 16:15:39 +0000 |
|---|---|---|
| committer | riastradh <riastradh@NetBSD.org> | 2022-11-25 16:15:39 +0000 |
| commit | e0ee0bc32a6cd19392e4033852ca4885ed944323 (patch) | |
| tree | d7cd64a3841aedcf86e17f359095627ba747512a /sys/dev | |
| parent | 56d6f1861616181cae4ef0e7b780d5f3ca1eb5e0 (diff) | |
kern/vfs_lockf.c: Parenthesize to make arithmetic match check.
We verified start + (fl->fl_len - 1) would not overflow, but then
computed (start + fl->fl_len) - 1 instead, and it is possible for
start + fl->fl_len to overflow before we subtract 1.
Reported-by: syzbot+762480b00cb14085f63a@syzkaller.appspotmail.com
https://syzkaller.appspot.com/bug?id=d69313b2460a12715315f9f5f74fbe44b8bc38ba
Diffstat (limited to 'sys/dev')
0 files changed, 0 insertions, 0 deletions
