Re: [PATCH v2] misc: Fix out-of-bounds array write in tdelete (bug 34506)
Adhemerval Zanella Netto <[email protected]>
| Newsgroups | gmane.comp.lib.glibc.alpha |
|---|---|
| Organization | Linaro |
| Message-ID | <[email protected]> |
On 14/08/26 08:44, Florian Weimer wrote: > * Florian Weimer: > >> * Adhemerval Zanella Netto: >> >>> On 14/08/26 05:19, Florian Weimer wrote: >>>> Allocate the maximum array sizes directly, instead of resizing >>>> the arrays as needed. This eliminates alloca usage from the >>>> function, and fixes the out-of-bounds accesses. The asserts >>>> guard against the bug coming back if the balancing of the tree >>>> turns out not to work correctly. >>> >>> LGTM, thanks. >>> >>> Reviewed-by: Adhemerval Zanella <[email protected]> >> >> Thanks. Should we treat this as a security vulnerability? > > Never mind, I forgot that it's CVE-2026-19542. Yeah, I was about to pointing this. We will need the advisory patch, but I think there is no urgency now.