Derrick Stolee <stolee@xxxxxxxxx> writes: > On 6/14/2018 11:44 PM, Jeff King wrote: >> The return value of ewah_read_mmap() is now an ssize_t, >> since we could (in theory) process up to 32GB of data. This >> would never happen in practice, but a corrupt or malicious >> .bitmap or index file could convince us to do so. > > Aside: Why a 32GB limit? Usually I see 32-bit issues limiting by 2 > (signed) or 4 GB (unsigned). Is there something specifically in the > bitmap format that stops at this size? The proposed log message for 1/3 has this bit - check the size for integer overflow (this should be impossible on 64-bit, as the size is given as a 32-bit count of 8-byte words, but is possible on a 32-bit system) 4 Giga 8-byte words makes 32 Giga bytes, I'd guess.