[PATCH v3] [BZ #15857] malloc: Check for integer overflow in memalign.
Siddhesh Poyarekar
siddhesh.poyarekar@gmail.com
Wed Sep 11 10:18:00 GMT 2013
On 11 September 2013 15:32, Will Newton <will.newton@linaro.org> wrote:
> These patches should also apply cleanly to 2.18, should I cherry pick
> them there too?
David owns 2.18, so he can take that call.
> Also I am not sure if it is worth allocating a CVE number for these
> issues - pvalloc and valloc seem very rarely used but memalign and
> posix_memalign are more common.
It would be useful to allocate a CVE number. The fact that pvalloc
and valloc are rarely used doesn't matter in this decision - it
matters when evaluating the impact of the bug.
Siddhesh
--
http://siddhesh.in
More information about the Libc-alpha
mailing list