]> granicus.if.org Git - procps-ng/commit
w: Clamp maxcmd to the MIN/MAX_CMD_WIDTH range.
authorQualys Security Advisory <qsa@qualys.com>
Thu, 1 Jan 1970 00:00:00 +0000 (00:00 +0000)
committerCraig Small <csmall@enc.com.au>
Wed, 13 Jun 2018 12:05:18 +0000 (22:05 +1000)
commit2503ec36304d961fb7b8eebb5f6a38ba58247bb1
tree38922acf0d576a75fc98cd5754e3af23d88913ee
parent3a437012f0e4041c2c1e9cbf0f08ad4b880fe80f
w: Clamp maxcmd to the MIN/MAX_CMD_WIDTH range.

The current checks allow out-of-range values (for example, if
getenv/atoi returns ~-2GB, maxcmd becomes ~+2GB after the subtraction).
This is not a security problem, none of this is under an attacker's
control.
w.c