The fix applied to the XDR decoder in revision 1.11 was incorrect.
This commit is contained in:
parent
c13373b7d7
commit
8f3e3652e4
Notes:
svn2git
2020-12-20 02:59:44 +00:00
svn path=/head/; revision=101147
@ -83,7 +83,7 @@ xdr_array(xdrs, addrp, sizep, maxsize, elsize, elproc)
|
||||
return (FALSE);
|
||||
}
|
||||
c = *sizep;
|
||||
if ((c > maxsize && UINT_MAX/elsize < c) &&
|
||||
if ((c > maxsize || UINT_MAX/elsize < c) &&
|
||||
(xdrs->x_op != XDR_FREE)) {
|
||||
return (FALSE);
|
||||
}
|
||||
|
Loading…
Reference in New Issue
Block a user