[PATCH 0/8] x86-64: Properly handle the length parameter [BZ# 24097]
Florian Weimer
fweimer@redhat.com
Fri Jan 18 10:50:00 GMT 2019
* H. J. Lu:
> On x32, the size_t parameter may be passed in the lower 32 bits of a
> 64-bit register with the non-zero upper 32 bits. The string/memory
> functions written in assembly can only use the lower 32 bits of a
> 64-bit register as length or must clear the upper 32 bits before using
> the full 64-bit register for length.
>
> This pach fixes string/memory functions written in assembly for x32.
> Tested on x86-64 and x32. On x86-64, libc.so is the same with and
> withou the fix.
Can this bug result in buffer overflows? Should we obtain a CVE
identifier?
Thanks,
Florian
More information about the Libc-alpha
mailing list