[Bug libc/756] missing arithmetic overflow check

[jakub at redhat dot com]

------- Additional Comments From jakub at redhat dot com  2005-02-23 17:24 -------
Well, the only problematic case would be if strlen (p) returns (size_t) -1.
But that just isn't going to happen, you couldn't have anything else in the
address space.  In all other cases, even if arithmetic overflow happens,
iconv will know the actual size of the output buffer and if the input is
too long, it will just return E2BIG and return ENOMEM anyway.

-- 


http://sources.redhat.com/bugzilla/show_bug.cgi?id=756

------- You are receiving this mail because: -------
You are on the CC list for the bug, or are watching someone who is.