commit 9cbe8e42c45faa5c3bb540ba04e8aa30b4844671
from: Martijn van Duren <martijn@openbsd.org>
date: Tue Nov  3 14:51:52 2026 UTC

Limit upper bound of cachetime

commit - 24fe07ac129b462c56742d855667d7900247265e
commit + 9cbe8e42c45faa5c3bb540ba04e8aa30b4844671
blob - 0bd8747c5bc64399486577c543ed75fa5c7b7ec1
blob + 96535458ce8b20f92c14a6641be71e94f5c67764
--- parse.y
+++ parse.y
@@ -191,7 +191,7 @@ command_opt	: ARGS stringlist {
 			command->args = $2;
 		}
 		| CACHETIME NUMBER {
-			if ($2 < 0) {
+			if ($2 < 0 || $2 > INT_MAX) {
 				yyerror("invalid cachetime");
 				YYERROR;
 			}