[Bug libc/17897] Multiple 'Dynamic Stack Allocations' in security point of view

["max at cxib dot net" <sourceware-bugzilla at sourceware dot org>]

https://sourceware.org/bugzilla/show_bug.cgi?id=17897

--- Comment #2 from Max <max at cxib dot net> ---
> Please do not file omnibus bugs like this; file one bug for each separate 
> instance where you believe the stack allocation is unbounded, unless two 
> instances are extremely closely related (variants of the same code, 
> cut-and-pasted twice, for example).

ok. However, I didn't check yet how long buffer may be used in the examples
above. Therefore, everything is in one issue.

> (Unbounded stack allocations are considered bugs whether or not they cross 
> privilege boundaries, but are only security issues where a privilege 
> boundary is plausibly crossed.)
> 

a application crash cannot be considered as a possible DoS?

-- 
You are receiving this mail because:
You are on the CC list for the bug.