This is the mail archive of the libc-hacker@sourceware.cygnus.com mailing list for the glibc project.
Note that libc-hacker is a closed list. You may look at the archives of this list, but subscription and posting are not open.
Index Nav: | [Date Index] [Subject Index] [Author Index] [Thread Index] | |
---|---|---|
Message Nav: | [Date Prev] [Date Next] | [Thread Prev] [Thread Next] |
Any comments? H.J. --- A developer here seems to have pinpointed the bug in random_r.c (line 375) part of glibc-2.1.1-6. see below. ---------- Forwarded message ---------- Date: Fri, 24 Mar 2000 13:55:27 -0500 (EST) From: John Mizel <John.Mizel@msdw.com> To: Brian Redman <ber@ms.com>, Erik Berg <eb@ms.com>, Mike Sklar <sklarm@ms.com> Subject: this looks like a bug random_r.c __setstate_r (arg_state, buf) { ... type = new_state[0] % MAX_TYPES; if (type < TYPE_0 || type >= TYPE_4) goto fail; ... } Where MAX_TYPES is 5, so if the type is 4 it will still fail. Probably should be: type = new_state[0] % MAX_TYPES; if (type < TYPE_0 || type > TYPE_4) goto fail;
Index Nav: | [Date Index] [Subject Index] [Author Index] [Thread Index] | |
---|---|---|
Message Nav: | [Date Prev] [Date Next] | [Thread Prev] [Thread Next] |