From de00a5a0929da097ecd46612e83b482698419f08 Mon Sep 17 00:00:00 2001 From: antirez Date: Thu, 22 Nov 2012 15:28:28 +0100 Subject: [PATCH] Fix integer overflow in zunionInterGenericCommand(). This fixes issue #761. --- src/t_zset.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/t_zset.c b/src/t_zset.c index f641d887..f5cdec3e 100644 --- a/src/t_zset.c +++ b/src/t_zset.c @@ -1497,7 +1497,7 @@ void zunionInterGenericCommand(redisClient *c, robj *dstkey, int op) { } /* test if the expected number of keys would overflow */ - if (3+setnum > c->argc) { + if (setnum > c->argc-3) { addReply(c,shared.syntaxerr); return; } -- 2.47.2