[Bug other/54411] libiberty: objalloc_alloc integer overflows (CVE-2012-3509)

[joseph at codesourcery dot com]

http://gcc.gnu.org/bugzilla/show_bug.cgi?id=54411

--- Comment #2 from joseph at codesourcery dot com <joseph at codesourcery dot com> 2012-08-29 19:09:55 UTC ---
You do realise that pretty much nothing in the toolchain checks for 
overflows in calculating allocation sizes?  If you want to fix such 
issues more systematically, the macros in libiberty.h such as XNEWVEC 
would be a good starting point in which to insert overflow checks, but 
there will be loads of other places affected as well.