[Bug string/22603] ia64 memchr overflows internal pointer check

["cvs-commit at gcc dot gnu.org" <sourceware-bugzilla at sourceware dot org>]

https://sourceware.org/bugzilla/show_bug.cgi?id=22603

--- Comment #4 from cvs-commit at gcc dot gnu.org <cvs-commit at gcc dot gnu.org> ---
This is an automated email from the git hooks/post-receive script. It was
generated because a ref change was pushed to the repository containing
the project "GNU C Library master sources".

The branch, master has been updated
       via  3bb1ef58b989012f8199b82af6ec136da2f9fda3 (commit)
       via  554e3d51efdd7d15c15876b80a7cba3ad9b6a738 (commit)
      from  cba595c350e52194e10c0006732e1991e3d0803b (commit)

Those revisions listed above that are new to this repository have
not appeared on any other notification email; so we list those
revisions in full, below.

- Log -----------------------------------------------------------------
https://sourceware.org/git/gitweb.cgi?p=glibc.git;h=3bb1ef58b989012f8199b82af6ec136da2f9fda3

commit 3bb1ef58b989012f8199b82af6ec136da2f9fda3
Author: Adhemerval Zanella <adhemerval.zanella@linaro.org>
Date:   Thu Dec 14 09:05:46 2017 -0200

    ia64: Fix memchr for large input sizes (BZ #22603)

    Current optimized ia64 memchr uses a strategy to check for last address
    by adding the input one with expected size.  However it does not take
    care for possible overflow.

    It was triggered by 3038145ca23 where default rawmemchr now uses memchr
    (p, c, (size_t)-1).

    This patch fixes it by implement a satured addition where overflows
    sets the maximum pointer size to UINTPTR_MAX.

    Checked on ia64-linux-gnu where it fixes both stratcliff and
    test-rawmemchr failures.

        Adhemerval Zanella  <adhemerval.zanella@linaro.org>
        James Clarke <jrtc27@jrtc27.com>

        [BZ #22603]
        * sysdeps/ia64/memchr.S (__memchr): Avoid overflow in pointer
        addition.

https://sourceware.org/git/gitweb.cgi?p=glibc.git;h=554e3d51efdd7d15c15876b80a7cba3ad9b6a738

commit 554e3d51efdd7d15c15876b80a7cba3ad9b6a738
Author: Adhemerval Zanella <adhemerval.zanella@linaro.org>
Date:   Thu Dec 14 10:07:44 2017 -0200

    sh: Fix clone exit return code (BZ #22605)

    Since 3f823e87cc (Call exit directly in clone (BZ #21512)) SH clone
    implementation fails to set the exit code resulting in the failures:

    FAIL: nptl/tst-align-clone
    FAIL: nptl/tst-getpid1

    This patch fixes the both testcases.

        [BZ #22605]
        * sysdeps/unix/sysv/linux/sh/clone.S (__clone): Fix exit return
        code.

    Signed-off-by: Adhemerval Zanella <adhemerval.zanella@linaro.org>

-----------------------------------------------------------------------

Summary of changes:
 ChangeLog                          |   13 +++++++++++++
 sysdeps/ia64/memchr.S              |    4 ++++
 sysdeps/unix/sysv/linux/sh/clone.S |    1 +
 3 files changed, 18 insertions(+), 0 deletions(-)

-- 
You are receiving this mail because:
You are on the CC list for the bug.