From owner-svn-src-projects@FreeBSD.ORG Tue Jan 12 07:40:58 2010 Return-Path: Delivered-To: svn-src-projects@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 5EBD71065670; Tue, 12 Jan 2010 07:40:58 +0000 (UTC) (envelope-from brooks@FreeBSD.org) Received: from svn.freebsd.org (svn.freebsd.org [IPv6:2001:4f8:fff6::2c]) by mx1.freebsd.org (Postfix) with ESMTP id 4E34A8FC18; Tue, 12 Jan 2010 07:40:58 +0000 (UTC) Received: from svn.freebsd.org (localhost [127.0.0.1]) by svn.freebsd.org (8.14.3/8.14.3) with ESMTP id o0C7ewPk017706; Tue, 12 Jan 2010 07:40:58 GMT (envelope-from brooks@svn.freebsd.org) Received: (from brooks@localhost) by svn.freebsd.org (8.14.3/8.14.3/Submit) id o0C7ewNH017704; Tue, 12 Jan 2010 07:40:58 GMT (envelope-from brooks@svn.freebsd.org) Message-Id: <201001120740.o0C7ewNH017704@svn.freebsd.org> From: Brooks Davis Date: Tue, 12 Jan 2010 07:40:58 +0000 (UTC) To: src-committers@freebsd.org, svn-src-projects@freebsd.org X-SVN-Group: projects MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Cc: Subject: svn commit: r202142 - projects/ngroups/sys/kern X-BeenThere: svn-src-projects@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "SVN commit messages for the src " projects" tree" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 12 Jan 2010 07:40:58 -0000 Author: brooks Date: Tue Jan 12 07:40:58 2010 New Revision: 202142 URL: http://svn.freebsd.org/changeset/base/202142 Log: Cap ngroups_max and (INT_MAX-1), any larger and we'll overflow the int counters. Modified: projects/ngroups/sys/kern/subr_param.c Modified: projects/ngroups/sys/kern/subr_param.c ============================================================================== --- projects/ngroups/sys/kern/subr_param.c Tue Jan 12 07:34:23 2010 (r202141) +++ projects/ngroups/sys/kern/subr_param.c Tue Jan 12 07:40:58 2010 (r202142) @@ -40,6 +40,7 @@ __FBSDID("$FreeBSD$"); #include "opt_param.h" #include "opt_maxusers.h" +#include #include #include #include @@ -232,12 +233,15 @@ init_param1(void) /* * Let the administrator set {NGROUPS_MAX}, but disallow values - * less than NGROUPS_MAX which would violate POSIX.1-2008. + * less than NGROUPS_MAX which would violate POSIX.1-2008 or + * greater than INT_MAX-1 which would result in overflow. */ ngroups_max = NGROUPS_MAX; TUNABLE_INT_FETCH("kern.ngroups", &ngroups_max); if (ngroups_max < NGROUPS_MAX) ngroups_max = NGROUPS_MAX; + if (ngroups_max > INT_MAX - 1) + ngroups_max = INT_MAX - 1; } /*