glibc segfault on "special" long double values is _ok_!?

Bruno Haible bruno@clisp.org
Thu Jun 7 01:50:00 GMT 2007


Andreas Schwab wrote:
> > Just printing an arbitrary
> > "long double" should not make a server vulnerable to a DoS attack.
> 
> In which way is this different from passing NULL to strlen?

Common knowledge: Programmers know that NULL is an invalid value for
many operations. They usually don't know that there are invalid values
in the 'long double' data type (unlike the 'float' and 'double' data
types).

Bruno



More information about the Libc-alpha mailing list