This is the mail archive of the libc-hacker@sources.redhat.com mailing list for the glibc project.

Note that libc-hacker is a closed list. You may look at the archives of this list, but subscription and posting are not open.

Index Nav:	[Date Index] [Subject Index] [Author Index] [Thread Index]
Message Nav:	[Date Prev] [Date Next]	[Thread Prev] [Thread Next]
Other format:	[Raw text]

Re: [PATCH] xdr_array and calloc security fix

From: Ulrich Drepper <drepper at redhat dot com>
To: Wolfram Gloger <wmglo at dent dot med dot uni-muenchen dot de>
Cc: libc-hacker at sources dot redhat dot com
Date: Fri, 02 Aug 2002 02:43:34 -0700
Subject: Re: [PATCH] xdr_array and calloc security fix
References: <20020802004635.Y20867@sunsite.ms.mff.cuni.cz> <20020802092945.24679.qmail@md.dent.med.uni-muenchen.de>

Wolfram Gloger wrote:

Do we already have some system-specific mechanism to detect the rare
overflow case for a 32bit-multiplication without having to perform a
division?

It should be possible to have something like

  ((a | b) > (a * b))

for unsigned values.  I'm not 100% sure, though.


--
---------------.                          ,-.   1325 Chesapeake Terrace
Ulrich Drepper  \    ,-------------------'   \  Sunnyvale, CA 94089 USA
Red Hat          `--' drepper at redhat.com   `------------------------

Follow-Ups:
- Re: [PATCH] xdr_array and calloc security fix
  - From: Ulrich Drepper

References:
- [PATCH] xdr_array and calloc security fix
  - From: Jakub Jelinek
- Re: [PATCH] xdr_array and calloc security fix
  - From: Wolfram Gloger

Index Nav:	[Date Index] [Subject Index] [Author Index] [Thread Index]
Message Nav:	[Date Prev] [Date Next]	[Thread Prev] [Thread Next]