Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [thread-next>] [day] [month] [year] [list]
Message-ID: <e8f9f75f-9aef-e771-e6ad-4045e6fcbf1e@cs.utah.edu>
Date: Thu, 19 May 2016 17:28:58 +0200
From: John Regehr <regehr@...utah.edu>
To: musl@...ts.openwall.com
Subject: uninitialized variable

This call:

regcomp(&r, "^(b+|||(CW*)*|){5,}{53}*+)^?5,}", REG_EXTENDED);

ends up using uninitialized memory like so:

regcomp.c:221:[kernel] warning: accessing uninitialized left-value:
                   assert \initialized(&right->num_submatches);
                   stack: tre_ast_new_catenation :: regcomp.c:1764 <-
                          tre_copy_ast :: regcomp.c:1916 <-
                          tre_expand_ast :: regcomp.c:2771 <-
                          musl_regcomp :: foo.c:9 <-
                          main

Having crap in this field seems bad since it is used to compute a malloc 
size.

John

Powered by blists - more mailing lists

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.