[7404] in bugtraq
Re: Fwd: Any user can panic OpenBSD machine
daemon@ATHENA.MIT.EDU (Chris Wedgwood)
Mon Jul 27 21:41:42 1998
Date: Tue, 28 Jul 1998 09:34:18 +1200
Reply-To: Chris Wedgwood <chris@CYBERNET.CO.NZ>
From: Chris Wedgwood <chris@CYBERNET.CO.NZ>
X-To: Michael Fuhr <mfuhr@DIMENSIONAL.COM>
To: BUGTRAQ@NETSPACE.ORG
In-Reply-To: <19980727112359.18461@dimensional.com>; from Michael Fuhr on Mon,
Jul 27, 1998 at 11:23:59AM -0600
Just for the hell of it, I tested this under linux 2.1.x - no problems.
Not, according to the source in front of me, the size is actually 2^32-1 (or
2^64-1 on 64-bit platforms), not negative because the length parameter is of
type size_t which is an unsigned integer.
It does not return EINVAL (as, I believe, somebody else reported).
-cw
