Files
linux/net
Xi Wang 6448669777 libceph: fix overflow check in crush_decode()
The existing overflow check (n > ULONG_MAX / b) didn't work, because
n = ULONG_MAX / b would both bypass the check and still overflow the
allocation size a + n * b.

The correct check should be (n > (ULONG_MAX - a) / b).

Signed-off-by: Xi Wang <xi.wang@gmail.com>
Signed-off-by: Sage Weil <sage@newdream.net>
2012-03-22 10:47:45 -05:00
..
2011-12-14 02:39:30 -05:00
2012-02-22 02:23:25 -05:00
2011-12-16 15:07:28 -05:00
2012-03-11 15:52:12 -07:00
2011-12-11 18:25:16 -05:00
2011-09-16 19:20:20 -04:00
2011-12-16 15:49:52 -05:00