svn commit: samba r23668 - in branches: SAMBA_3_0/source/lib
Volker.Lendecke at SerNet.DE
Sun Jul 1 16:11:27 GMT 2007
On Sun, Jul 01, 2007 at 04:19:40PM +0200, Michael Adam wrote:
> This was exactly my reasoning, why num_ucs2 can't wrap.
It could in theory have wrapped as inside SMB_MALLOC_ARRAY
(i.e. malloc_array) length is multiplied with
sizeof(smb_ucs2_t) again. But the overflow check is done
before that, before the multiply.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Size: 189 bytes
Desc: not available
Url : http://lists.samba.org/archive/samba-technical/attachments/20070701/f0d8c977/attachment.bin
More information about the samba-technical