From d3ff255fa582ac5fbcb2d71cb96876def6f2a660 Mon Sep 17 00:00:00 2001 From: Qualys Security Advisory Date: Thu, 1 Jan 1970 00:00:00 +0000 Subject: [PATCH] 0041-proc/sig.c: Harden print_given_signals(). And signal_name_to_number(). ---------------------------- adapted for newlib branch . file has been moved to: lib/signals.c . only 'signal_name_to_number()' was impacted . function 'print_given_signals()' no longer exists . thus the bulk of original patch no longer applicable Signed-off-by: Jim Warner --- lib/signals.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/lib/signals.c b/lib/signals.c index 6074d6a3..caff420d 100644 --- a/lib/signals.c +++ b/lib/signals.c @@ -200,7 +200,7 @@ int signal_name_to_number(const char *restrict name){ if(*endp || endp==name) return -1; /* not valid */ } - if(val+SIGRTMIN>127) + if(val<0 || val+SIGRTMIN>127) return -1; /* not valid */ return val+offset; }