https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=206551

Jilles Tjoelker <[email protected]> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |[email protected]

--- Comment #4 from Jilles Tjoelker <[email protected]> ---
The explanation why there is no triggerable problem is that the
ICONV_CSMAXDATALEN expression is of type size_t, an unsigned type. Then,
comparing an int and a size_t, the int is converted to size_t, converting
negative values to very large positive values.

This is fragile (changing ICONV_CSMAXDATALEN to a plain number like 266240 will
make it vulnerable) and causes compiler warnings with -Wsign-compare, but is
not an immediate bug.

-- 
You are receiving this mail because:
You are the assignee for the bug.
_______________________________________________
[email protected] mailing list
https://lists.freebsd.org/mailman/listinfo/freebsd-bugs
To unsubscribe, send any mail to "[email protected]"

Reply via email to