View | Details | Raw Unified | Return to bug 239976
Collapse All | Expand All

(-)sbin/ping/ping.c (-1 / +1 lines)
Lines 473-479 Link Here
473
			break;
473
			break;
474
		case 's':		/* size of packet to send */
474
		case 's':		/* size of packet to send */
475
			ltmp = strtol(optarg, &ep, 0);
475
			ltmp = strtol(optarg, &ep, 0);
476
			if (*ep || ep == optarg || ltmp < 0)
476
			if (*ep || ep == optarg || ltmp > (long)INT_MAX || ltmp < 0)
477
				errx(EX_USAGE, "invalid packet size: `%s'",
477
				errx(EX_USAGE, "invalid packet size: `%s'",
478
				    optarg);
478
				    optarg);
479
			if (uid != 0 && ltmp > DEFDATALEN) {
479
			if (uid != 0 && ltmp > DEFDATALEN) {

Return to bug 239976