History

inetdevice: fixed signed integer overflow

There could be a signed overflow in the following code. The expression, (32-logmask) is comprised between 0 and 31 included. It may be equal to 31. In such a case the left shift will produce a signed integer overflow. According to the C99 Standard, this is an undefined behavior. A simple fix is to replace the signed int 1 with the unsigned int 1U.

Vincent BENAYOUN committed 12 years ago

Commit 84bc8861 parent b23dc5a1 file · +1 −1Browse files

Unified · Split

include/linux/inetdevice.h+1−1
@@ -242,7 +242,7 @@ static inline void in_dev_put(struct in_device *idev) · 241 unmodified lines
242242 static __inline__ __be32 inet_make_mask(int logmask)
243243 {
244244 if (logmask)
245− return htonl(~((1<<(32-logmask))-1));
245+ return htonl(~((1U<<(32-logmask))-1));
246246 return 0;
247247 }
248248

Keyboard shortcuts

General

Show keyboard shortcuts
?
Focus the current search
/

Issues and pull requests

Open filters
f

Issues, pull requests and Inbox

Select next item
j↓
Select previous item
k↑
Open selected item
Enter
Dismiss filters or clear selection
Esc

Repository code

Go to file
t