This is the mail archive of the
gcc-bugs@gcc.gnu.org
mailing list for the GCC project.
[Bug tree-optimization/81694] VRP optimization may introduce buffer overflow vulnerabilities into applications
- From: "scdengyuan at gmail dot com" <gcc-bugzilla at gcc dot gnu dot org>
- To: gcc-bugs at gcc dot gnu dot org
- Date: Thu, 03 Aug 2017 13:07:42 +0000
- Subject: [Bug tree-optimization/81694] VRP optimization may introduce buffer overflow vulnerabilities into applications
- Auto-submitted: auto-generated
- References: <bug-81694-4@http.gcc.gnu.org/bugzilla/>
https://gcc.gnu.org/bugzilla/show_bug.cgi?id=81694
Yuan Deng <scdengyuan at gmail dot com> changed:
What |Removed |Added
----------------------------------------------------------------------------
Status|RESOLVED |VERIFIED
--- Comment #4 from Yuan Deng <scdengyuan at gmail dot com> ---
Inspite of val is overflowed or not, the later check should have avoid this:
if( m_var > 0 && m_index > 0 && m_index < (1 << 16))
but did not!
I thin it's a very serious problem.