[Bug libstdc++/105857] codecvt::do_length causes unexpected buffer overflow

andysem at mail dot ru gcc-bugzilla@gcc.gnu.org
Wed Nov 20 01:44:48 GMT 2024


https://gcc.gnu.org/bugzilla/show_bug.cgi?id=105857

--- Comment #8 from andysem at mail dot ru ---
I think, sanitizers won't detect it unless you build libstdc++ with them
enabled. I would expect valgrind to detect it though.

I think, Ubuntu builds libstdc++ with _FORTIFY_SOURCE enabled, which is why it
checks for pointer validity and fails.


More information about the Gcc-bugs mailing list