From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (qmail 8588 invoked by alias); 5 Mar 2012 09:57:33 -0000 Received: (qmail 8575 invoked by uid 22791); 5 Mar 2012 09:57:32 -0000 X-SWARE-Spam-Status: No, hits=-2.8 required=5.0 tests=ALL_TRUSTED,AWL,BAYES_00,TW_VF X-Spam-Check-By: sourceware.org Received: from localhost (HELO sourceware.org) (127.0.0.1) by sourceware.org (qpsmtpd/0.43rc1) with ESMTP; Mon, 05 Mar 2012 09:57:20 +0000 From: "thoger at redhat dot com" To: glibc-bugs@sources.redhat.com Subject: [Bug stdio/13656] vfprintf nargs integer overflow Date: Mon, 05 Mar 2012 09:57:00 -0000 X-Bugzilla-Reason: CC X-Bugzilla-Type: changed X-Bugzilla-Watch-Reason: None X-Bugzilla-Product: glibc X-Bugzilla-Component: stdio X-Bugzilla-Keywords: glibc_2.14, glibc_2.15 X-Bugzilla-Severity: normal X-Bugzilla-Who: thoger at redhat dot com X-Bugzilla-Status: NEW X-Bugzilla-Priority: P2 X-Bugzilla-Assigned-To: carlos at systemhalted dot org X-Bugzilla-Target-Milestone: --- X-Bugzilla-Changed-Fields: Message-ID: In-Reply-To: References: X-Bugzilla-URL: http://sourceware.org/bugzilla/ Auto-Submitted: auto-generated Content-Type: text/plain; charset="UTF-8" MIME-Version: 1.0 Mailing-List: contact glibc-bugs-help@sourceware.org; run by ezmlm Precedence: bulk List-Id: List-Subscribe: List-Post: List-Help: , Sender: glibc-bugs-owner@sourceware.org X-SW-Source: 2012-03/txt/msg00053.txt.bz2 http://sourceware.org/bugzilla/show_bug.cgi?id=13656 --- Comment #2 from Tomas Hoger 2012-03-05 09:56:50 UTC --- FYI, a comment form Laszlo Ersek in Red Hat BZ: https://bugzilla.redhat.com/show_bug.cgi?id=794766#c8 The easiest fix would have been to restrict "nargs" to NL_ARGMAX. http://www.opengroup.org/onlinepubs/9699919799/basedefs/limits.h.html#tag_13_23_03_07 -- Configure bugmail: http://sourceware.org/bugzilla/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.