This is the mail archive of the libc-hacker@sourceware.cygnus.com mailing list for the glibc project.

Note that libc-hacker is a closed list. You may look at the archives of this list, but subscription and posting are not open.

Index Nav: [Date Index] [Subject Index] [Author Index] [Thread Index]
Message Nav: [Date Prev] [Date Next] [Thread Prev] [Thread Next]

[arijort@valinux.com: [VA-Tech] bug in glibc-2.1.1]


Any comments?


H.J.
---
A developer here seems to have pinpointed the bug in
random_r.c (line 375) part of glibc-2.1.1-6. see below.

---------- Forwarded message ----------
Date: Fri, 24 Mar 2000 13:55:27 -0500 (EST)
From: John Mizel <John.Mizel@msdw.com>
To: Brian Redman <ber@ms.com>, Erik Berg <eb@ms.com>,
     Mike Sklar <sklarm@ms.com>
Subject: this looks like a bug

random_r.c
__setstate_r (arg_state, buf)
{
...
  type = new_state[0] % MAX_TYPES;
  if (type < TYPE_0 || type >= TYPE_4)
    goto fail;
...
}


Where MAX_TYPES is 5, so if the type is 4 it will still fail.  Probably
should be:

  type = new_state[0] % MAX_TYPES;
  if (type < TYPE_0 || type > TYPE_4)
    goto fail;
Index Nav: [Date Index] [Subject Index] [Author Index] [Thread Index]
Message Nav: [Date Prev] [Date Next] [Thread Prev] [Thread Next]