[Bug string/22603] ia64 memchr overflows internal pointer check

["cvs-commit at gcc dot gnu.org" <sourceware-bugzilla at sourceware dot org>]

https://sourceware.org/bugzilla/show_bug.cgi?id=22603

--- Comment #6 from cvs-commit at gcc dot gnu.org <cvs-commit at gcc dot gnu.org> ---
This is an automated email from the git hooks/post-receive script. It was
generated because a ref change was pushed to the repository containing
the project "GNU C Library master sources".

The branch, release/2.26/master has been updated
       via  268bd5f053204b80e771169e55b45704c04d77ad (commit)
      from  989f59db3940ab4b76176af9a62b6980eafb7a22 (commit)

Those revisions listed above that are new to this repository have
not appeared on any other notification email; so we list those
revisions in full, below.

- Log -----------------------------------------------------------------
https://sourceware.org/git/gitweb.cgi?p=glibc.git;h=268bd5f053204b80e771169e55b45704c04d77ad

commit 268bd5f053204b80e771169e55b45704c04d77ad
Author: Adhemerval Zanella <adhemerval.zanella@linaro.org>
Date:   Thu Dec 14 09:05:46 2017 -0200

    ia64: Fix memchr for large input sizes (BZ #22603)

    Current optimized ia64 memchr uses a strategy to check for last address
    by adding the input one with expected size.  However it does not take
    care for possible overflow.

    It was triggered by 3038145ca23 where default rawmemchr now uses memchr
    (p, c, (size_t)-1).

    This patch fixes it by implement a satured addition where overflows
    sets the maximum pointer size to UINTPTR_MAX.

    Checked on ia64-linux-gnu where it fixes both stratcliff and
    test-rawmemchr failures.

        Adhemerval Zanella  <adhemerval.zanella@linaro.org>
        James Clarke <jrtc27@jrtc27.com>

        [BZ #22603]
        * sysdeps/ia64/memchr.S (__memchr): Avoid overflow in pointer
        addition.

    (cherry picked from commit 3bb1ef58b989012f8199b82af6ec136da2f9fda3)

-----------------------------------------------------------------------

Summary of changes:
 ChangeLog             |    7 +++++++
 sysdeps/ia64/memchr.S |    4 ++++
 2 files changed, 11 insertions(+), 0 deletions(-)

-- 
You are receiving this mail because:
You are on the CC list for the bug.