Re: cl3.3.3 SPARC Solaris static build isRea dPtr() problem
Peter Gutmann <[email protected]>
| Newsgroups | gmane.comp.encryption.cryptlib |
|---|---|
| Message-ID | <[email protected]> |
"JONATHAN LEONARD, BLOOMBERG/ 731 LEXIN" <[email protected]> writes: >The isPtr macros at crypt.h:694-711 check that the address of the pointer is >above _etext in a static build. This isn't true in our environment. So far, >it seems to work fine with the macros at lines 713-715. Yeah, that was based on recommendations in the CERT secure coding guidelines (see https://www.securecoding.cert.org/confluence/display/seccode/MEM10-C.+Define+and+use+a+pointer+validation+function), but it turns out it's very unreliable. It's removed in the upcoming 3.4.0 release. Peter. _______________________________________________ Cryptlib mailing list [email protected] via Mail: [email protected] Archive: ftp://ftp.franken.de/pub/crypt/cryptlib/archives/ http://news.gmane.org/gmane.comp.encryption.cryptlib Posts from non-subscribed addresses are blocked to prevent spam, please subscribe in order to post messages.