]> CyberLeo.Net >> Repos - FreeBSD/stable/10.git/commit
MFC r316766:
authorbrooks <brooks@ccf9f872-aa2e-dd11-9fc8-001c23d0bc1f>
Mon, 24 Apr 2017 21:41:04 +0000 (21:41 +0000)
committerbrooks <brooks@ccf9f872-aa2e-dd11-9fc8-001c23d0bc1f>
Mon, 24 Apr 2017 21:41:04 +0000 (21:41 +0000)
commit4d61be7b53af3141a16fa0dbacd894ba1ad1adda
tree492cd507b38751396190429d4fb2b0807f94fb27
parent2cd9e0858d5715878d181e4d6f4c5292e74e4f15
MFC r316766:

Correct an out of bounds read with HN_AUTOSCALE and very large numbers.

The maximum scale is 6 (K, M, G, T, P, E) (B is 0).

Overly large explict scales were checked correctly, but for sufficently
large numbers HN_AUTOSCALE would get to 7 resulting in an out of bounds
read.

Found with humanize_number_test and CHERI bounds checking.

Reviewed by: emaste
Obtained from: CheriBSD
Sponsored by: DARPA, AFRL

git-svn-id: svn://svn.freebsd.org/base/stable/10@317387 ccf9f872-aa2e-dd11-9fc8-001c23d0bc1f
lib/libutil/humanize_number.c