[Bug libc/18240] hcreate((size_t)-1) should fail with ENOMEM (CVE-2015-8778)

fweimer at redhat dot com sourceware-bugzilla@sourceware.org
Fri Jan 22 10:25:00 GMT 2016


https://sourceware.org/bugzilla/show_bug.cgi?id=18240

Florian Weimer <fweimer at redhat dot com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|RESOLVED                    |REOPENED
         Resolution|FIXED                       |---
           Assignee|unassigned at sourceware dot org   |fweimer at redhat dot com
   Target Milestone|2.23                        |---

--- Comment #8 from Florian Weimer <fweimer at redhat dot com> ---
The problem is still present in master.  The check against SIZE_MAX is
incorrect, it should use INT_MAX to be on the safe side.

-- 
You are receiving this mail because:
You are on the CC list for the bug.


More information about the Glibc-bugs mailing list