The fix applied to the XDR decoder in revision 1.11 was incorrect.
This commit is contained in:
parent
eb7b85d384
commit
292ee3bd86
@ -83,7 +83,7 @@ xdr_array(xdrs, addrp, sizep, maxsize, elsize, elproc)
|
||||
return (FALSE);
|
||||
}
|
||||
c = *sizep;
|
||||
if ((c > maxsize && UINT_MAX/elsize < c) &&
|
||||
if ((c > maxsize || UINT_MAX/elsize < c) &&
|
||||
(xdrs->x_op != XDR_FREE)) {
|
||||
return (FALSE);
|
||||
}
|
||||
|
Loading…
Reference in New Issue
Block a user