Re: [RFC] saturate check_*_overflow() output?

From: Kees Cook
Date: Wed Aug 05 2020 - 16:50:29 EST


On Wed, Aug 05, 2020 at 01:38:58PM +0200, Rasmus Villemoes wrote:
> Anyway, we don't need to apply it to the last expression inside ({}), we
> can just pass the whole ({}) to must_check_overflow() as in
>
> -#define check_sub_overflow(a, b, d) ({ \
> +#define check_sub_overflow(a, b, d) must_check_overflow(({ \

Oh! Yes, of course. I was blinded by looking inside the macro and not
wanting to spoil the type magic. Yes, that's perfect. I will spin a
patch...

--
Kees Cook