From owner-cvs-src@FreeBSD.ORG  Mon May 14 16:47:17 2007
Return-Path: <owner-cvs-src@FreeBSD.ORG>
X-Original-To: cvs-src@FreeBSD.org
Delivered-To: cvs-src@FreeBSD.org
Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52])
	by hub.freebsd.org (Postfix) with ESMTP id 55A2816A400;
	Mon, 14 May 2007 16:47:17 +0000 (UTC)
	(envelope-from sobomax@FreeBSD.org)
Received: from sippysoft.com (gk.360sip.com [72.236.70.226])
	by mx1.freebsd.org (Postfix) with ESMTP id 0676B13C457;
	Mon, 14 May 2007 16:47:16 +0000 (UTC)
	(envelope-from sobomax@FreeBSD.org)
Received: from [192.168.1.47] ([204.244.149.125]) (authenticated bits=0)
	by sippysoft.com (8.13.8/8.13.8) with ESMTP id l4EGlBXg086178
	(version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO);
	Mon, 14 May 2007 09:47:15 -0700 (PDT)
	(envelope-from sobomax@FreeBSD.org)
Message-ID: <4648921F.1090407@FreeBSD.org>
Date: Mon, 14 May 2007 09:45:19 -0700
From: Maxim Sobolev <sobomax@FreeBSD.org>
Organization: Sippy Software, Inc.
User-Agent: Thunderbird 1.5.0.10 (Windows/20070221)
MIME-Version: 1.0
To: Colin Percival <cperciva@FreeBSD.org>
References: <200705140500.l4E50cSp082379@repoman.freebsd.org>
In-Reply-To: <200705140500.l4E50cSp082379@repoman.freebsd.org>
Content-Type: text/plain; charset=KOI8-U; format=flowed
Content-Transfer-Encoding: 7bit
Cc: cvs-src@FreeBSD.org, src-committers@FreeBSD.org, cvs-all@FreeBSD.org
Subject: Re: cvs commit: src/lib/libmd/i386 rmd160.S sha.S
X-BeenThere: cvs-src@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: CVS commit messages for the src tree <cvs-src.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/cvs-src>,
	<mailto:cvs-src-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/cvs-src>
List-Post: <mailto:cvs-src@freebsd.org>
List-Help: <mailto:cvs-src-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/cvs-src>,
	<mailto:cvs-src-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Mon, 14 May 2007 16:47:17 -0000

Colin Percival wrote:
>   (1) The platform is i386.
[...]
>   still be broken if conditions (1)-(3) apply AND the buffer extends
>   beyond 4GB (i.e., there is an integer overflow in computing "data + len").

How that could be? Isn't userland address space on i386 limited by 4GB?

-Maxim