[Bug 219451] [dtrace] Certain llquantize() parameters trigger assertion

[bugzilla-noreply at freebsd.org]

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=219451

--- Comment #4 from commit-hook at freebsd.org ---
A commit references this bug:

Author: markj
Date: Mon Aug 21 21:56:03 UTC 2017
New revision: 322773
URL: https://svnweb.freebsd.org/changeset/base/322773

Log:
  Fix an off-by-two in the llquantize() action parameter validation.

  The aggregation created by llquantize() partitions values into buckets; the
  lower bound of the bucket containing the largest values is b^{m+1}, where
  b and m are the second and fourth parameters to the action, respectively.
  Bucket bounds are stored in a 64-bit integer, and so the llquantize()
  validation checks need to verify that b^{m+1} fits in 64 bits. However, it
  was only verifying that b^{m-1} fits in 64 bits, so certain parameter
  combinations could trigger assertion failures in libdtrace.

  PR:           219451
  MFC after:    1 week

Changes:
  head/cddl/contrib/opensolaris/lib/libdtrace/common/dt_cc.c

-- 
You are receiving this mail because:
You are on the CC list for the bug.