[PATCH 1/2] vfprintf: validate nargs and argument-based offsets

[Joseph S. Myers]

On Mon, 5 Mar 2012, Andreas Jaeger wrote:

> > 2012-03-02  Kees Cook  <keescook@chromium.org>
> > 
> > 	[BZ #13656]
> > 	* stdio-common/vfprintf.c (vfprintf): Check for nargs overflow and
> > 	possibly allocate from heap instead of stack.
> > 	* stdio-common/bug-vfprintf-nargs.c: New file.
> > 	* stdio-common/Makefile (tests): Add nargs overflow test.
> 
> Thanks, this is ok now.
> 
> I committed it to trunk and added a glibc_2.15 mark to the bug report,

If 13656 is now fully fixed then NEWS needs to be updated (this is 
something for committers rather than patch submitters to do since patches 
to the list of fixed bugs in NEWS won't generally apply directly for the 
same reason as patches to ChangeLog files).

-- 
Joseph S. Myers
joseph@codesourcery.com