[Bug malloc/15855] New: pvalloc integer overflow can corrupt allocator state

will.newton at gmail dot com sourceware-bugzilla@sourceware.org
Tue Aug 20 08:00:00 GMT 2013


http://sourceware.org/bugzilla/show_bug.cgi?id=15855

            Bug ID: 15855
           Summary: pvalloc integer overflow can corrupt allocator state
           Product: glibc
           Version: 2.18
            Status: NEW
          Severity: normal
          Priority: P2
         Component: malloc
          Assignee: unassigned at sourceware dot org
          Reporter: will.newton at gmail dot com

The following test case crashes when it should return NULL.

#include <stdlib.h>
#include <malloc.h>
#include <unistd.h>

int main(void)
{
  unsigned long pagesize = getpagesize();

  pvalloc (-pagesize);

  return 0;
}

-- 
You are receiving this mail because:
You are on the CC list for the bug.



More information about the Glibc-bugs mailing list