openssh bugs - Sep 2024 - [Bug 3734] New: Expression 'l > SIZE_MAX' is always false

https://bugzilla.mindrot.org/show_bug.cgi?id=3734

            Bug ID: 3734
           Summary: Expression 'l > SIZE_MAX' is always false
           Product: Portable OpenSSH
           Version: 9.8p1
          Hardware: Other
                OS: All
            Status: NEW
          Severity: enhancement
          Priority: P5
         Component: Build system
          Assignee: unassigned-bugs at mindrot.org
          Reporter: suhov.ra at npc-ksb.ru

File:
https://github.com/openssh/openssh-portable/blob/master/sshbuf-misc.c
Line: 221

Expression 'l > SIZE_MAX' is always false , which may be caused by a
logical error: 'l' has a type 'size_t' with minimum value
'0' and a
maximum value '18446744073709551615'


Instead, other methods should be used to protect against overflows or
similar problems, or this condition should be removed as unimportant.

-- 
You are receiving this mail because:
You are watching the assignee of the bug.

https://bugzilla.mindrot.org/show_bug.cgi?id=3734

Damien Miller <djm at mindrot.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |djm at mindrot.org

--- Comment #1 from Damien Miller <djm at mindrot.org> ---
Are you filing bugs from the results of a static analyser?

-- 
You are receiving this mail because:
You are watching someone on the CC list of the bug.
You are watching the assignee of the bug.

https://bugzilla.mindrot.org/show_bug.cgi?id=3734

--- Comment #2 from Suhov Roman <suhov.ra at npc-ksb.ru> ---
(In reply to Damien Miller from comment #1)
> ?? ????????????? ?????? ?? ??????????? ???????????? ????????????
The static analyzer produced this error, after which I analyzed it

-- 
You are receiving this mail because:
You are watching someone on the CC list of the bug.
You are watching the assignee of the bug.

https://bugzilla.mindrot.org/show_bug.cgi?id=3734

Damien Miller <djm at mindrot.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
         Resolution|---                         |WONTFIX
             Status|NEW                         |RESOLVED

-- 
You are receiving this mail because:
You are watching the assignee of the bug.
You are watching someone on the CC list of the bug.