Skip to content
Commit d37c2b20 authored by Arjun Shankar's avatar Arjun Shankar
Browse files

syslog: Fix integer overflow in __vsyslog_internal (CVE-2023-6780)



__vsyslog_internal calculated a buffer size by adding two integers, but
did not first check if the addition would overflow.  This commit fixes
that.

Reviewed-by: default avatarCarlos O'Donell <carlos@redhat.com>
Tested-by: default avatarCarlos O'Donell <carlos@redhat.com>
(cherry picked from commit ddf542da)
parent d0338312
Loading
Loading
Loading
Loading
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Please register or to comment