From 2e5514defa810b8f0365dfb7bb0dbbdb06ebd936 Mon Sep 17 00:00:00 2001 From: Brooks Davis Date: Wed, 24 Feb 2010 15:52:18 +0000 Subject: [PATCH] Don't inforce an upper bound on kern.ngroups. The INT_MAX-1 limit was too high due to several overflows. The actual limit is somewhere in the neighborhood of INT_MAX/4 on 64-bit machines, but most systems could not support such a limit due to a lack of memory and the cost of duplicate credentials. Reported by: bde --- sys/kern/subr_param.c | 2 -- 1 file changed, 2 deletions(-) diff --git a/sys/kern/subr_param.c b/sys/kern/subr_param.c index fcd8131d4b08..1504a784c773 100644 --- a/sys/kern/subr_param.c +++ b/sys/kern/subr_param.c @@ -240,8 +240,6 @@ init_param1(void) TUNABLE_INT_FETCH("kern.ngroups", &ngroups_max); if (ngroups_max < NGROUPS_MAX) ngroups_max = NGROUPS_MAX; - if (ngroups_max > INT_MAX - 1) - ngroups_max = INT_MAX - 1; } /*