[PATCH v3] [BZ #15857] malloc: Check for integer overflow in memalign.

[Will Newton]

On 12 September 2013 23:29, Allan McRae <allan@archlinux.org> wrote:
> On 12/09/13 17:24, Will Newton wrote:
>> On 12 September 2013 03:19, Russ Allbery <rra@stanford.edu> wrote:
>>> Siddhesh Poyarekar <siddhesh.poyarekar@gmail.com> writes:
>>>> On 11 September 2013 16:02, Will Newton <will.newton@linaro.org> wrote:
>>>
>>>>> I'm not sure what the process is here, MAINTAINERS on the wiki has a
>>>>> link to CERT, but I aware that there are folks who work for CVE issuing
>>>>> authorities on this list. ;-)
>>>
>>>> I've seen people emailing requests for CVE numbers on the oss-security
>>>> mailing list (oss-security at lists dot openwall dot com).
>>>
>>> For some reason, this document is remarkably hard to find in Google, but
>>> here's the process:
>>>
>>>     https://people.redhat.com/kseifrie/CVE-OpenSource-Request-HOWTO.html
>>
>> Thanks, the issue has been assigned CVE-2013-4332.
>>
>
> Now there is a CVE assigned, it would be good to add a NEWS entry saying
> it has been fixed.

Done.

-- 
Will Newton
Toolchain Working Group, Linaro