[Bug libstdc++/105857] codecvt::do_length causes unexpected buffer overflow
andysem at mail dot ru
gcc-bugzilla@gcc.gnu.org
Wed Nov 20 01:44:48 GMT 2024
https://gcc.gnu.org/bugzilla/show_bug.cgi?id=105857
--- Comment #8 from andysem at mail dot ru ---
I think, sanitizers won't detect it unless you build libstdc++ with them
enabled. I would expect valgrind to detect it though.
I think, Ubuntu builds libstdc++ with _FORTIFY_SOURCE enabled, which is why it
checks for pointer validity and fails.
More information about the Gcc-bugs
mailing list