[PATCH] Check for overflow in __alloc_dir

[Florian Weimer]

In __alloc_dir in sysdeps/posix/opendir.c, the st_blksize member can 
contain a large value from a source which is not necessarily trusted. 
Therefore, we should check that the addition does not overflow and fall 
back to default_allocation in that case.

Built and regression-tested on x86_64-redhat-linux-gnu.  This is 
difficult to test because it requires file system support.

-- 
Florian Weimer / Red Hat Product Security Team
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0001-__aloc_dir-check-for-integer-overflow-in-malloc-argu.patch
Type: text/x-patch
Size: 1459 bytes
Desc: not available
URL: <http://sourceware.org/pipermail/libc-alpha/attachments/20121011/0b0cfe40/attachment.bin>