https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=290992

Dag-Erling Smørgrav <[email protected]> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                URL|                            |https://reviews.freebsd.org
                   |                            |/D53726
           Assignee|[email protected]            |[email protected]
             Status|New                         |In Progress
              Flags|                            |mfc-stable15?,
                   |                            |mfc-stable14?,
                   |                            |mfc-stable13?

--- Comment #1 from Dag-Erling Smørgrav <[email protected]> ---
1. Negative inode numbers aren't valid either, so I don't see what difference
this makes.
2. Aborting on invalid input is an implementation choice, not a bug.
3. As you've already been told, quot is not a security boundary.
4. When reporting a bug, “expected output” usually means the output one would
expect if the program worked correctly.

That being said, donames() is wildly inconsistent in how it handles different
types of invalid input, so it's worth rewriting.

-- 
You are receiving this mail because:
You are the assignee for the bug.

Reply via email to