Commit 46f40cfb authored by Fedor Indutny's avatar Fedor Indutny
Browse files

buffer: fix unintended unsigned overflow

`offset` is user supplied variable and may be bigger than
`ts_obj_length`. There is no need to subtract them and pass along, so
just throw when the subtraction result would overflow.

PR-URL: https://github.com/nodejs/node/pull/7494


Reviewed-By: default avatarBen Noordhuis <info@bnoordhuis.nl>
parent a528d0dd
Supports Markdown
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment