Colin Percival e981a4e863 Correctly handle the case in calloc(num, size) where
(size_t)(num * size) == 0
but both num and size are nonzero.

Reported by:	Ilja van Sprundel
Approved by:	jasone
Security:	Integer overflow; calloc was allocating 1 byte in
		response to a request for a multiple of 2^32 (or 2^64)
		bytes instead of returning NULL.
2006-08-13 21:54:47 +00:00
..
2006-02-26 23:01:11 +00:00
2005-01-20 09:17:07 +00:00
2005-01-20 09:17:07 +00:00
2004-07-06 13:58:45 +00:00
2004-02-23 03:30:02 +00:00
2003-09-14 13:41:59 +00:00
2005-01-20 09:17:07 +00:00
2005-01-20 09:17:07 +00:00
2006-03-28 22:16:04 +00:00
2006-04-13 18:19:44 +00:00
2005-01-20 09:17:07 +00:00
2005-01-20 09:17:07 +00:00
2005-01-20 09:17:07 +00:00
2006-05-20 21:11:35 +00:00
2006-05-20 21:11:35 +00:00
2006-03-28 22:16:04 +00:00