This is the mail archive of the
glibc-bugs@sourceware.org
mailing list for the glibc project.
[Bug string/23865] New: wcsstr is quadratic-time
- From: "jsm28 at gcc dot gnu.org" <sourceware-bugzilla at sourceware dot org>
- To: glibc-bugs at sourceware dot org
- Date: Tue, 06 Nov 2018 12:11:07 +0000
- Subject: [Bug string/23865] New: wcsstr is quadratic-time
- Auto-submitted: auto-generated
https://sourceware.org/bugzilla/show_bug.cgi?id=23865
Bug ID: 23865
Summary: wcsstr is quadratic-time
Product: glibc
Version: 2.28
Status: NEW
Severity: normal
Priority: P2
Component: string
Assignee: unassigned at sourceware dot org
Reporter: jsm28 at gcc dot gnu.org
Target Milestone: ---
The wcsstr implementation in glibc is a naive O(mn) implementation, which
allows denial of service with untrusted inputs. A smarter O(m+n)
implementation should be used, as with strstr.
--
You are receiving this mail because:
You are on the CC list for the bug.