[Bug target/16601] [3.3 regression] miscompilation of automatic dynamic arrays in crypto/IPsec subsystems of the Linux kernel

falk at debian dot org gcc-bugzilla@gcc.gnu.org
Tue Aug 24 21:31:00 GMT 2004


------- Additional Comments From falk at debian dot org  2004-08-24 21:31 -------
(In reply to comment #1)
> I'm sorry but I got this wrong.  The compiler is allocating 12 bytes of headroom
> unconditionally so it is actually safe.

Okay, let's close this then.

As a side note, the array size must never evaluate to zero, or you'll invoke the
crashes and exploits you mentioned.


-- 
           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|UNCONFIRMED                 |RESOLVED
         Resolution|                            |INVALID


http://gcc.gnu.org/bugzilla/show_bug.cgi?id=16601



More information about the Gcc-bugs mailing list