[lxc-devel] [lxc/lxc] e6b35f: confile_utils: fix a signed integer overflow

Christian Brauner noreply at github.com
Sun Mar 28 17:21:04 UTC 2021


  Branch: refs/heads/master
  Home:   https://github.com/lxc/lxc
  Commit: e6b35fbfb603fa5c9d047411e3d1678acdd2eb56
      https://github.com/lxc/lxc/commit/e6b35fbfb603fa5c9d047411e3d1678acdd2eb56
  Author: Evgeny Vereshchagin <evvers at ya.ru>
  Date:   2021-03-28 (Sun, 28 Mar 2021)

  Changed paths:
    M src/lxc/confile_utils.c

  Log Message:
  -----------
  confile_utils: fix a signed integer overflow

This was triggered by the following chain of conversions:

lxc_safe_uint("020000000020") -> 2147483664 (uint)
sig_num(2147483664 (uint)) -> -2147483632 (int)

64 - -2147483632 cannot be represented in type 'int'

Closes https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32596

Signed-off-by: Evgeny Vereshchagin <evvers at ya.ru>


  Commit: 94d05c50c9f3cfe3ca310ab263d4aad52a3e4cbc
      https://github.com/lxc/lxc/commit/94d05c50c9f3cfe3ca310ab263d4aad52a3e4cbc
  Author: Christian Brauner <christian.brauner at ubuntu.com>
  Date:   2021-03-28 (Sun, 28 Mar 2021)

  Changed paths:
    M src/lxc/confile_utils.c

  Log Message:
  -----------
  Merge pull request #3744 from evverx/oss-fuzz-32596

confile_utils: fix a signed integer overflow


Compare: https://github.com/lxc/lxc/compare/db62570f0f89...94d05c50c9f3


More information about the lxc-devel mailing list