aboutsummaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorWill Newton <will.newton@linaro.org>2013-08-16 11:59:37 +0100
committerAdhemerval Zanella <azanella@linux.vnet.ibm.com>2015-01-16 06:14:26 -0500
commit71d84750188dc6e1d45a9d05e40b00c430dc5637 (patch)
treedca63c8be086340aa340b514fb01a5cbc66f4220
parent052b65bfeee78d8ba82f070f9f10f79bb0de5376 (diff)
downloadglibc-71d84750188dc6e1d45a9d05e40b00c430dc5637.tar
glibc-71d84750188dc6e1d45a9d05e40b00c430dc5637.tar.gz
glibc-71d84750188dc6e1d45a9d05e40b00c430dc5637.tar.bz2
glibc-71d84750188dc6e1d45a9d05e40b00c430dc5637.zip
malloc: Check for integer overflow in valloc.
A large bytes parameter to valloc could cause an integer overflow and corrupt allocator internals. Check the overflow does not occur before continuing with the allocation. ChangeLog: 2013-09-11 Will Newton <will.newton@linaro.org> [BZ #15856] * malloc/malloc.c (__libc_valloc): Check the value of bytes does not overflow.
-rw-r--r--ChangeLog6
1 files changed, 6 insertions, 0 deletions
diff --git a/ChangeLog b/ChangeLog
index c448dda711..2c9dc89a5b 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -337,6 +337,12 @@
2013-09-11 Will Newton <will.newton@linaro.org>
+ [BZ #15856]
+ * malloc/malloc.c (__libc_valloc): Check the value of bytes
+ does not overflow.
+
+2013-09-11 Will Newton <will.newton@linaro.org>
+
[BZ #15855]
* malloc/malloc.c (__libc_pvalloc): Check the value of bytes
does not overflow.