Fix integer overflow in zunionInterGenericCommand().

This fixes issue redis#761.
darashi · Nov 22, 2012 · cceb0c5 · cceb0c5
1 parent 65606b3
commit cceb0c5
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/src/t_zset.c b/src/t_zset.c
@@ -1497,7 +1497,7 @@ void zunionInterGenericCommand(redisClient *c, robj *dstkey, int op) {
     }
 
     /* test if the expected number of keys would overflow */
-    if (3+setnum > c->argc) {
+    if (setnum > c->argc-3) {
         addReply(c,shared.syntaxerr);
         return;
     }