Bug 13540. Fix for strcpy, strcat, strncpy, strncat, stpcpy, stpncpy.

Dmitrieva Liubov liubov.dmitrieva@gmail.com
Fri Dec 23 04:19:00 GMT 2011


Hello

This patch fixes the bug #13540 (sourceware.org/bugzilla).

strncpy()/strncpy()/.../  algorithm uses the destination
memory beyond the string end for 16-byte load, puts changes into that part that
is relevant to destination string and writes whole 16-byte chunk into memory.
I have a multi theading test case where the memory beyond the string
end contains malloc/free
data, that appear corrupted in case free() updates it in between the 16-byte
read and 16-byte write.


ChangeLog:
2011-12-22  Liubov Dmitrieva  <liubov.dmitrieva@gmail.com>

	* sysdeps/i386/i686/multiarch/strcpy-ssse3.S: Fix
	wrong copying processing for last bytes.


--
Liubov Dmitrieva
Intel Corporation
-------------- next part --------------
A non-text attachment was scrubbed...
Name: strcpy_fix.patch
Type: application/octet-stream
Size: 55632 bytes
Desc: not available
URL: <http://sourceware.org/pipermail/libc-alpha/attachments/20111223/a9cfa270/attachment.obj>


More information about the Libc-alpha mailing list