diff options
| author | Patrick Steinhardt <ps@pks.im> | 2025-04-17 12:49:36 +0200 |
|---|---|---|
| committer | Junio C Hamano <gitster@pobox.com> | 2025-04-17 08:15:15 -0700 |
| commit | 8f282bdff0b49744b45d619075b59a5e8b596613 (patch) | |
| tree | d5db95061340804ca8718d2ba92171894ad12e3b | |
| parent | 5b97a56fa0e7d580dc8865b73107407c9b3f0eff (diff) | |
| download | git-8f282bdff0b49744b45d619075b59a5e8b596613.tar.gz | |
parse: fix off-by-one for minimum signed values
We accept a maximum value in `git_parse_signed()` that restricts the
range of accepted integers. As the intent is to pass `INT*_MAX` values
here, this maximum doesn't only act as the upper bound, but also as the
implicit lower bound of the accepted range.
This lower bound is calculated by negating the maximum. But given that
the maximum value of a signed integer with N bits is `2^(N-1)-1` whereas
the minimum value is `-2^(N-1)` we have an off-by-one error in the lower
bound.
Fix this off-by-one error by using `-max - 1` as lower bound instead.
Signed-off-by: Patrick Steinhardt <ps@pks.im>
Signed-off-by: Junio C Hamano <gitster@pobox.com>
| -rw-r--r-- | parse.c | 2 |
1 files changed, 1 insertions, 1 deletions
@@ -38,7 +38,7 @@ int git_parse_signed(const char *value, intmax_t *ret, intmax_t max) errno = EINVAL; return 0; } - if ((val < 0 && -max / factor > val) || + if ((val < 0 && (-max - 1) / factor > val) || (val > 0 && max / factor < val)) { errno = ERANGE; return 0; |