svn commit: samba r23668 - in branches: SAMBA_3_0/source/lib SAMBA_3_0_26/source/lib

[Volker Lendecke]

On Sun, Jul 01, 2007 at 04:19:40PM +0200, Michael Adam wrote:
> This was exactly my reasoning, why num_ucs2 can't wrap.

It could in theory have wrapped as inside SMB_MALLOC_ARRAY
(i.e. malloc_array) length is multiplied with
sizeof(smb_ucs2_t) again. But the overflow check is done
before that, before the multiply.

Volker
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
Url : http://lists.samba.org/archive/samba-technical/attachments/20070701/f0d8c977/attachment.bin