[<prev] [next>] [thread-next>] [day] [month] [year] [list]
Message-ID: <CAOWvS+0oOjLue4S=E1ua7oMMe-EZn_zaU3RvYDMuSGNxDP2isw@mail.gmail.com>
Date: Fri, 1 Dec 2023 14:08:54 +0900
From: Anuraag Agrawal <anuraaga@...il.com>
To: musl@...ts.openwall.com
Subject: Large overflow in __intscan ignored
Currently, __intscan, used by functions like strtol, does not seem to check
for overflow during multiplication.
https://git.musl-libc.org/cgit/musl/tree/src/internal/intscan.c#n69
It at the end checks against the limit, e.g. the size of a long
https://git.musl-libc.org/cgit/musl/tree/src/internal/intscan.c#n90
However, if the value overflows and ends up in the range of the limit,
errno will not be set. It seems that each multiplication operation needs to
be checking for overflow and return errno if it ever happens.
Content of type "text/html" skipped
Powered by blists - more mailing lists
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
