This is the mail archive of the
libc-alpha@sourceware.org
mailing list for the glibc project.
Re: [PATCH] malloc: Always call memcpy in _int_realloc [BZ #24027]
- From: DJ Delorie <dj at redhat dot com>
- To: Florian Weimer <fw at deneb dot enyo dot de>
- Cc: libc-alpha at sourceware dot org, mail at nh2 dot me
- Date: Mon, 31 Dec 2018 15:38:07 -0500
- Subject: Re: [PATCH] malloc: Always call memcpy in _int_realloc [BZ #24027]
Florian Weimer <fw@deneb.enyo.de> writes:
> Thanks. Do you think we should treat this as a vulnerability? Can
> this code path be reached in a default configuration?
I think that triggering this as an exploit would require too much
dependence on the system-as-a-whole state to be considered a risk.