diff options
| author | Paul Pluzhnikov <ppluzhnikov@google.com> | 2018-05-08 18:12:41 -0700 |
|---|---|---|
| committer | Paul Pluzhnikov <ppluzhnikov@google.com> | 2018-05-08 18:12:41 -0700 |
| commit | 5460617d1567657621107d895ee2dd83bc1f88f2 (patch) | |
| tree | 478c1a918b575f667e34721dd6b1232b59b52554 /math | |
| parent | aaee3cd88ed58f332f261021d78d071db6265e85 (diff) | |
| download | glibc-5460617d1567657621107d895ee2dd83bc1f88f2.zip glibc-5460617d1567657621107d895ee2dd83bc1f88f2.tar.gz glibc-5460617d1567657621107d895ee2dd83bc1f88f2.tar.bz2 | |
Fix BZ 22786: integer addition overflow may cause stack buffer overflow
when realpath() input length is close to SSIZE_MAX.
2018-05-09 Paul Pluzhnikov <ppluzhnikov@google.com>
[BZ #22786]
* stdlib/canonicalize.c (__realpath): Fix overflow in path length
computation.
* stdlib/Makefile (test-bz22786): New test.
* stdlib/test-bz22786.c: New test.
Diffstat (limited to 'math')
0 files changed, 0 insertions, 0 deletions