This is the mail archive of the libc-alpha@sourceware.org mailing list for the glibc project.

Index Nav:	[Date Index] [Subject Index] [Author Index] [Thread Index]
Message Nav:	[Date Prev] [Date Next]	[Thread Prev] [Thread Next]
Other format:	[Raw text]

Re: [patch] Fix for heap overflow in wscanf (BZ 16618)

From: Paul Pluzhnikov <ppluzhnikov at google dot com>
To: "H.J. Lu" <hjl dot tools at gmail dot com>
Cc: "Carlos O'Donell" <carlos at redhat dot com>, GLIBC Devel <libc-alpha at sourceware dot org>, Joseph Myers <jsm28 at gcc dot gnu dot org>
Date: Sun, 1 Feb 2015 17:52:03 -0800
Subject: Re: [patch] Fix for heap overflow in wscanf (BZ 16618)
Authentication-results: sourceware.org; auth=none
References: <CALoOobPgvuBLTk4GzOchr792MHNi1yLgsO5Jqf8MPvY+bk544Q at mail dot gmail dot com> <CAMe9rOpO8xv27HnNmdbOh20-wg2C5pj+QzUfQ=XpEvfd=QXKzw at mail dot gmail dot com>

On Sun, Feb 1, 2015 at 1:36 PM, H.J. Lu <hjl.tools@gmail.com> wrote:

> Please include the testcase in BZ #16618.

Updated patch attached.

Thanks,
-- 
Paul Pluzhnikov


2015-02-01  Paul Pluzhnikov  <ppluzhnikov@google.com>

	[BZ #16618]
	* stdio-common/vfscanf.c (ADDW): Correct alloca size check and
	fix heap buffer overflow.
	* stdio-common/tst-sscanf.c: Add test for BZ 16618

Attachment: pr16618.patch2.txt
Description: Text document

References:
- [patch] Fix for heap overflow in wscanf (BZ 16618)
  - From: Paul Pluzhnikov
- Re: [patch] Fix for heap overflow in wscanf (BZ 16618)
  - From: H.J. Lu

Index Nav:	[Date Index] [Subject Index] [Author Index] [Thread Index]
Message Nav:	[Date Prev] [Date Next]	[Thread Prev] [Thread Next]