nss: introduce signed integer overflow check in malloc
Marcus Poller
h-glibcdev@crystaldown.de
Fri Jun 19 09:28:56 GMT 2026
This concerns https://sourceware.org/bugzilla/show_bug.cgi?id=33977
replacing realloc by reallocarray introduces a basic overflow check.
(old + count) might still overflow, but since the backend is trusted, we
do not consider this to be a valid case.
Patch attached.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0001-nss-introduce-signed-integer-overflow-check-in-mallo.patch
Type: text/x-patch
Size: 1012 bytes
Desc: not available
URL: <https://sourceware.org/pipermail/libc-alpha/attachments/20260619/7a51af9c/attachment.bin>
More information about the Libc-alpha
mailing list