Re: [PATCH] Fix overflow of ConnectionOutput-size and -count

Peter Harris phar...@opentext.com writes: When (long) is larger than (int), and when realloc succeeds with sizes larger than INT_MAX, ConnectionOutput-size and ConnectionOutput-count overflow and become negative. When ConnectionOutput-count is negative, InsertIOV does not actually insert an

Re: [PATCH] Fix overflow of ConnectionOutput-size and -count

Peter Harris phar...@opentext.com writes: When (long) is larger than (int), and when realloc succeeds with sizes larger than INT_MAX, ConnectionOutput-size and ConnectionOutput-count overflow and become negative. When ConnectionOutput-count is negative, InsertIOV does not actually insert an

[PATCH] Fix overflow of ConnectionOutput-size and -count

When (long) is larger than (int), and when realloc succeeds with sizes larger than INT_MAX, ConnectionOutput-size and ConnectionOutput-count overflow and become negative. When ConnectionOutput-count is negative, InsertIOV does not actually insert an IOV, and FlushClient goes into an infinite loop