[Bug 209661] amd64_set_ioperm overflow

bugzilla-noreply at freebsd.org bugzilla-noreply at freebsd.org
Fri May 20 19:20:15 UTC 2016


https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=209661

--- Comment #4 from CTurt <cturt at hardenedbsd.org> ---
That negative loop was indeed my original theory I was trying to explain,
however I no longer think that this is true. In the loop `i` is compared
against an unsigned value, so an unsigned comparison will be used. That is to
say, a negative value of `i` is counted as a large positive value for the
comparison.

The result of this is that the loop condition won't be satisfied, and the array
won't be indexed.

-- 
You are receiving this mail because:
You are the assignee for the bug.


More information about the freebsd-bugs mailing list