freeradius-server icon indicating copy to clipboard operation
freeradius-server copied to clipboard

Published 20 hours ago • verified publisher icon FreeRADIUS

Deal with unlikely overflows in minmax_heap_extend() (CID #1604610)

Open jejones3141 opened this issue 1 year ago • 0 comments

Since n_size is sometimes set to UINT_MAX, the size calculation in talloc_realloc() may overflow as written; ditto for the failure error message.

jejones3141 avatar Jul 12 '24 17:07 jejones3141