[Bug libc/34512] New: Integer overflow in _obstack_newchunk

https://sourceware.org/bugzilla/show_bug.cgi?id=34512

            Bug ID: 34512
           Summary: Integer overflow in _obstack_newchunk
           Product: glibc
           Version: unspecified
            Status: NEW
          Severity: normal
          Priority: P2
         Component: libc
          Assignee: unassigned at sourceware dot org
          Reporter: fweimer at redhat dot com
                CC: drepper.fsp at gmail dot com
  Target Milestone: ---
             Flags: security+

Created attachment 16927
  --> https://sourceware.org/bugzilla/attachment.cgi?id=16927&action=edit
RHEL-215156.html

The _obstack_newchunk function has the usual overflow when dealing with
allocation size calculations.

This issue is distinct from using `int` for size arguments.

Red Hat Product Security asked me to forward the attached report. I'm required
to mention: Found by AISLE in partnership with Red Hat

-- 
You are receiving this mail because:
You are on the CC list for the bug.