1
0
mirror of https://git.FreeBSD.org/src.git synced 2025-02-02 17:08:56 +00:00
Colin Percival e981a4e863 Correctly handle the case in calloc(num, size) where
(size_t)(num * size) == 0
but both num and size are nonzero.

Reported by:	Ilja van Sprundel
Approved by:	jasone
Security:	Integer overflow; calloc was allocating 1 byte in
		response to a request for a multiple of 2^32 (or 2^64)
		bytes instead of returning NULL.
2006-08-13 21:54:47 +00:00
..
2006-04-12 19:51:14 +00:00
2005-10-04 22:00:35 +00:00
2006-07-27 04:54:03 +00:00
2006-07-27 04:54:03 +00:00
2005-11-24 10:43:35 +00:00
2006-04-13 08:12:31 +00:00
2006-03-16 15:18:17 +00:00
2006-03-16 15:18:17 +00:00
2006-06-06 16:58:19 +00:00
2006-03-16 15:18:17 +00:00
2006-08-08 05:04:43 +00:00
2005-09-26 06:23:43 +00:00
2005-11-24 11:26:36 +00:00
2006-07-28 21:34:37 +00:00
2006-03-23 14:09:21 +00:00
2006-08-04 17:56:31 +00:00