- markus@cvs.openbsd.org 2002/11/05 19:45:20

     [monitor.c]
     handle overflows for size_t larger than u_int; siw@goneko.de, bug #425

diff --git a/ChangeLog b/ChangeLog
index ae04d4c5ba949cb687859e5cb78d6b853a91b643..d256bd93b9d8feb1e23736097e0579695157500c 100644 (file)
--- a/ChangeLog
+++ b/ChangeLog
@@ -16,6 +16,9 @@
    - markus@cvs.openbsd.org 2002/11/04 10:09:51
      [packet.c]
      log before send disconnect; ok djm@
+   - markus@cvs.openbsd.org 2002/11/05 19:45:20
+     [monitor.c]
+     handle overflows for size_t larger than u_int; siw@goneko.de, bug #425
 
 20021021
  - (djm) Bug #400: Kill ssh-rand-helper children on timeout, patch from 

diff --git a/monitor.c b/monitor.c
index 4ad3f3d21534d4bb02c59df252290e20e1eb47fb..b91cfdeda735e140670d34a0a11422d597806f86 100644 (file)
--- a/monitor.c
+++ b/monitor.c
@@ -25,7 +25,7 @@
  */
 
 #include "includes.h"
-RCSID("$OpenBSD: monitor.c,v 1.29 2002/09/26 11:38:43 markus Exp $");
+RCSID("$OpenBSD: monitor.c,v 1.30 2002/11/05 19:45:20 markus Exp $");
 
 #include <openssl/dh.h>
 
@@ -1551,7 +1551,7 @@ mm_get_keystate(struct monitor *pmonitor)
 void *
 mm_zalloc(struct mm_master *mm, u_int ncount, u_int size)
 {
-       size_t len = size * ncount;
+       size_t len = (size_t) size * ncount;
        void *address;
 
        if (len == 0 || ncount > SIZE_T_MAX / size)