[PATCH] malloc/malloc.c: Mitigate null-byte overflow attacks

DJ Delorie dj@redhat.com
Wed Nov 15 00:06:00 GMT 2017


Moritz Eckert <m.eckert@cs.ucsb.edu> writes:
>> But as of now, regarding my proposed patch, it would prevent the 
>> Poison-Null-Byte attack immediately and with no performance impact, 
>> which seems like a good solution until the heap protector is ready.

I'm OK with the original patch that moves the size check outside the
unlink() macro, at least.  Wait for a second +1, then it should be OK to
apply.



More information about the Libc-alpha mailing list