[patch] Fix for heap overflow in wscanf (BZ 16618)
Paul Eggert
eggert@cs.ucla.edu
Tue Feb 3 16:12:00 GMT 2015
On 02/02/2015 11:52 AM, Paul Pluzhnikov wrote:
> On Mon, Feb 2, 2015 at 11:23 AM, Paul Eggert <eggert@cs.ucla.edu> wrote:
>
>> So, how about the attached (untested) patch to vfscanf.c instead? It's
>> simpler. It does rely on realloc (wp, SIZE_MAX) returning NULL, but that's
>> safe in glibc.
> I like it. Re-tested.
>
> Combined patch attached.
>
> Thanks,
Thanks, this fix looks good to me. I assume Carlos needs to ACK this,
given that the Ottawa river is still frozen solid....
More information about the Libc-alpha
mailing list