[PATCH v4 0/2] stdio-common: Fix heap overflow in scanf %mc pattern [BZ #34008]

Rocket Ma marocketbd@gmail.com
Sun Apr 5 18:18:19 GMT 2026


This series includes a patch with requested fix for CVE-2026-5450,
unified optimized function to calculate %m pattern array expansion, as
well as a neat regression test with mcheck.

Rocket Ma (2):
  stdio-common: Add regression test [BZ #34008]
  stdio-common: Fix buffer overflow in scanf %mc [BZ #34008]

 stdio-common/Makefile              |  4 ++
 stdio-common/tst-vfscanf-bz34008.c | 48 +++++++++++++++++++
 stdio-common/vfscanf-internal.c    | 74 +++++++++++++++++++-----------
 3 files changed, 98 insertions(+), 28 deletions(-)
 create mode 100644 stdio-common/tst-vfscanf-bz34008.c

-- 
2.53.0


More information about the Libc-alpha mailing list