nss: introduce signed integer overflow check in malloc

Marcus Poller h-glibcdev@crystaldown.de
Fri Jun 19 09:28:56 GMT 2026


This concerns https://sourceware.org/bugzilla/show_bug.cgi?id=33977
replacing realloc by reallocarray introduces a basic overflow check.
(old + count) might still overflow, but since the backend is trusted, we 
do not consider this to be a valid case.

Patch attached.

-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0001-nss-introduce-signed-integer-overflow-check-in-mallo.patch
Type: text/x-patch
Size: 1012 bytes
Desc: not available
URL: <https://sourceware.org/pipermail/libc-alpha/attachments/20260619/7a51af9c/attachment.bin>


More information about the Libc-alpha mailing list