[patch] Fix for heap overflow in wscanf (BZ 16618)

Paul Pluzhnikov ppluzhnikov@google.com
Tue Feb 3 16:06:00 GMT 2015


On Mon, Feb 2, 2015 at 11:52 AM, Paul Pluzhnikov <ppluzhnikov@google.com> wrote:
> On Mon, Feb 2, 2015 at 11:23 AM, Paul Eggert <eggert@cs.ucla.edu> wrote:
>
>> So, how about the attached (untested) patch to vfscanf.c instead? It's
>> simpler.  It does rely on realloc (wp, SIZE_MAX) returning NULL, but that's
>> safe in glibc.
>
> I like it. Re-tested.
>
> Combined patch attached.

Ping?

-- 
Paul Pluzhnikov



More information about the Libc-alpha mailing list