Re: [v2 PATCH] arith: Fix CVE-2026-31323 INTMAX_MIN / -1 overflow
Herbert Xu <[email protected]> Tue, 14 Apr 2026 07:48:28 +0800
| Newsgroups | org.kernel.vger.dash |
|---|---|
| Message-ID | <[email protected]> |
Harald van Dijk <[email protected]> wrote: > > This looks fine if it's a conscious decision, but it differs from what > dash generally does when the result of arithmetic is not representable > in intmax_t, and also differs from bash. Depending on the reason there's > apparently a CVE for this, this may be an issue, see below. This is not a normal overflow. This actually raises an exception and kills the thread. Thanks, -- Email: Herbert Xu <[email protected]> Home Page: http://gondor.apana.org.au/~herbert/ PGP Key: http://gondor.apana.org.au/~herbert/pubkey.txt