[PATCH v3] [BZ #15857] malloc: Check for integer overflow in memalign.

Will Newton will.newton@linaro.org
Wed Sep 11 10:32:00 GMT 2013


On 11 September 2013 11:18, Siddhesh Poyarekar
<siddhesh.poyarekar@gmail.com> wrote:

>> Also I am not sure if it is worth allocating a CVE number for these
>> issues - pvalloc and valloc seem very rarely used but memalign and
>> posix_memalign are more common.
>
> It would be useful to allocate a CVE number.  The fact that pvalloc
> and valloc are rarely used doesn't matter in this decision - it
> matters when evaluating the impact of the bug.

I'm not sure what the process is here, MAINTAINERS on the wiki has a
link to CERT, but I aware that there are folks who work for CVE
issuing authorities on this list. ;-)

-- 
Will Newton
Toolchain Working Group, Linaro



More information about the Libc-alpha mailing list