[PATCH] malloc/malloc.c: Mitigate null-byte overflow attacks
DJ Delorie
dj@redhat.com
Wed Nov 15 00:06:00 GMT 2017
Moritz Eckert <m.eckert@cs.ucsb.edu> writes:
>> But as of now, regarding my proposed patch, it would prevent the
>> Poison-Null-Byte attack immediately and with no performance impact,
>> which seems like a good solution until the heap protector is ready.
I'm OK with the original patch that moves the size check outside the
unlink() macro, at least. Wait for a second +1, then it should be OK to
apply.
More information about the Libc-alpha
mailing list