about summary refs log tree commit diff
diff options
context:
space:
mode:
authorWill Newton <will.newton@linaro.org>2013-08-16 11:59:37 +0100
committerAdhemerval Zanella <azanella@linux.vnet.ibm.com>2015-01-16 06:14:26 -0500
commit71d84750188dc6e1d45a9d05e40b00c430dc5637 (patch)
treedca63c8be086340aa340b514fb01a5cbc66f4220
parent052b65bfeee78d8ba82f070f9f10f79bb0de5376 (diff)
downloadglibc-71d84750188dc6e1d45a9d05e40b00c430dc5637.tar.gz
glibc-71d84750188dc6e1d45a9d05e40b00c430dc5637.tar.xz
glibc-71d84750188dc6e1d45a9d05e40b00c430dc5637.zip
malloc: Check for integer overflow in valloc.
A large bytes parameter to valloc could cause an integer overflow
and corrupt allocator internals. Check the overflow does not occur
before continuing with the allocation.

ChangeLog:

2013-09-11  Will Newton  <will.newton@linaro.org>

	[BZ #15856]
	* malloc/malloc.c (__libc_valloc): Check the value of bytes
	does not overflow.
-rw-r--r--ChangeLog6
1 files changed, 6 insertions, 0 deletions
diff --git a/ChangeLog b/ChangeLog
index c448dda711..2c9dc89a5b 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -337,6 +337,12 @@
 
 2013-09-11  Will Newton  <will.newton@linaro.org>
 
+	[BZ #15856]
+	* malloc/malloc.c (__libc_valloc): Check the value of bytes
+	does not overflow.
+
+2013-09-11  Will Newton  <will.newton@linaro.org>
+
 	[BZ #15855]
 	* malloc/malloc.c (__libc_pvalloc): Check the value of bytes
 	does not overflow.