binutils and _FORTIFY_SOURCE
Daniel Jacobowitz
drow@false.org
Sun Nov 20 22:09:00 GMT 2005
On Mon, Nov 21, 2005 at 08:36:46AM +1030, Alan Modra wrote:
> On Sun, Nov 20, 2005 at 09:46:44AM -0800, Anthony Green wrote:
> > typedef struct
> > {
> > char foo[4];
> > int bar;
> > } mystruct;
> >
> > we see code kind of like...
> >
> > mystruct s;
> > strcpy (s.foo, "1234"); /* buffer overflow here */
> > s.bar = 5; /* but it doesn't really matter */
> >
> > Has anybody looked into this before?
> > Will you accept patches to remove false _FORTIFY_SOURCE errors?
>
> Yes. The above really ought to be using memcpy.
Didn't someone (Jakub?) try and fail to fix ar once already?
Not that I'd complain if someone succeeded!
--
Daniel Jacobowitz
CodeSourcery, LLC
More information about the Binutils
mailing list