Bug 13540. Fix for strcpy, strcat, strncpy, strncat, stpcpy, stpncpy.
Dmitrieva Liubov
liubov.dmitrieva@gmail.com
Fri Dec 23 04:19:00 GMT 2011
Hello
This patch fixes the bug #13540 (sourceware.org/bugzilla).
strncpy()/strncpy()/.../ algorithm uses the destination
memory beyond the string end for 16-byte load, puts changes into that part that
is relevant to destination string and writes whole 16-byte chunk into memory.
I have a multi theading test case where the memory beyond the string
end contains malloc/free
data, that appear corrupted in case free() updates it in between the 16-byte
read and 16-byte write.
ChangeLog:
2011-12-22 Liubov Dmitrieva <liubov.dmitrieva@gmail.com>
* sysdeps/i386/i686/multiarch/strcpy-ssse3.S: Fix
wrong copying processing for last bytes.
--
Liubov Dmitrieva
Intel Corporation
-------------- next part --------------
A non-text attachment was scrubbed...
Name: strcpy_fix.patch
Type: application/octet-stream
Size: 55632 bytes
Desc: not available
URL: <http://sourceware.org/pipermail/libc-alpha/attachments/20111223/a9cfa270/attachment.obj>
More information about the Libc-alpha
mailing list