[PATCH 1/2] arm: CVE-2020-6096: fix memcpy and memmove for negative length [BZ #25620]

Alexander Anisimov a.anisimov@omprussia.ru
Wed Jul 8 12:09:55 GMT 2020


>> On Tue, Jul 07, 2020 at 08:08:22PM +0200, Florian Weimer wrote:
>>> From: Evgeny Eremin <e.eremin@omprussia.ru>
>>>
>>> Unsigned branch instructions could be used for r2 to fix the wrong
>>> behavior when a negative length is passed to memcpy and memmove.
>>> This commit fixes the generic arm implementation of memcpy amd memmove.
>>>
>>> ---
>>> Please double-check for correct attribution and commit message
>>> contents.  Thanks.  I will submit the NEWS update and XFAIL removal
>>> separately.
>>>
>>> ...
>>
>> LGTM, thanks.

> Is the other patch okay as well?  Thanks.

Yes, it's, patch for multiarch and commit message LGTM, too. Thanks.

-- 
Alexander


More information about the Libc-alpha mailing list