diff options
| author | Dag-Erling Smørgrav <des@FreeBSD.org> | 2026-11-01 20:09:50 +0000 |
|---|---|---|
| committer | Dag-Erling Smørgrav <des@FreeBSD.org> | 2026-11-01 20:09:50 +0000 |
| commit | b487aca48535e5f04e4913447fcbe33f1bf56c68 (patch) | |
| tree | 16eb88daa84da2cafd36ea73b9f447d5e2ff6eb1 /contrib/tcpdump/print.h | |
| parent | 0a12444b2989c38a5d2e358e0f9ef01c665cc268 (diff) | |
In vn_io_fault1(), the read / write length can easily exceed INT_MAX.
Passing it directly to uiomove(), which expects an int, results in a
negative uio_resid, which to the caller looks like we read more than
was requested.
PR: 298159
MFC after: 1 week
Reviewed by: olce, kib
Differential Revision: https://reviews.freebsd.org/D59412
Diffstat (limited to 'contrib/tcpdump/print.h')
0 files changed, 0 insertions, 0 deletions
