You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
There is a multiply with overflow problem in kernel/src/syscall/munmap.rs, munmap(), Maestro.
The div_ceil() rounds the result towards positive infinity.
As a result, when user calls munmap with large length (i.e., 0xfffffff0), the following multiplication operation will cause an integer overflow problem.
There is a multiply with overflow problem in kernel/src/syscall/munmap.rs,
munmap()
, Maestro.The
div_ceil()
rounds the result towards positive infinity.As a result, when user calls munmap with large
length
(i.e., 0xfffffff0), the following multiplication operation will cause an integer overflow problem.maestro/kernel/src/syscall/munmap.rs
Lines 45 to 46 in e7ebdfa
For example:
The text was updated successfully, but these errors were encountered: