[patch] Fix for heap overflow in wscanf (BZ 16618)

Paul Eggert eggert@cs.ucla.edu
Tue Feb 3 16:12:00 GMT 2015


On 02/02/2015 11:52 AM, Paul Pluzhnikov wrote:
> On Mon, Feb 2, 2015 at 11:23 AM, Paul Eggert <eggert@cs.ucla.edu> wrote:
>
>> So, how about the attached (untested) patch to vfscanf.c instead? It's
>> simpler.  It does rely on realloc (wp, SIZE_MAX) returning NULL, but that's
>> safe in glibc.
> I like it. Re-tested.
>
> Combined patch attached.
>
> Thanks,

Thanks, this fix looks good to me.  I assume Carlos needs to ACK this, 
given that the Ottawa river is still frozen solid....



More information about the Libc-alpha mailing list