Re: [v2 PATCH] arith: Fix CVE-2026-31323 INTMAX_MIN / -1 overflow

Herbert Xu <[email protected]> Tue, 14 Apr 2026 07:48:28 +0800
Newsgroups org.kernel.vger.dash
Message-ID <[email protected]>
Harald van Dijk <[email protected]> wrote:
>
> This looks fine if it's a conscious decision, but it differs from what 
> dash generally does when the result of arithmetic is not representable 
> in intmax_t, and also differs from bash. Depending on the reason there's 
> apparently a CVE for this, this may be an issue, see below.

This is not a normal overflow.  This actually raises an exception and
kills the thread.

Thanks,
-- 
Email: Herbert Xu <[email protected]>
Home Page: http://gondor.apana.org.au/~herbert/
PGP Key: http://gondor.apana.org.au/~herbert/pubkey.txt