alloca vs malloc

[Joseph S. Myers]

On Fri, 16 May 2014, Jeff Law wrote:

> > E.g. bug 16618 (something I'd have
> > thought would be a natural case for a CVE - wscanf may not be widely used,
> > but it's still a buffer overrun if wscanf is used -
> More likely nobody's contacted the appropriate folks.  Sounds like it'd be
> worth of a CVE to me.

I'm sort of presuming that some distribution security people are watching 
for newly filed glibc bugs that seem CVE-worthy, and requesting CVEs.

-- 
Joseph S. Myers
joseph@codesourcery.com