Home page logo

oss-sec logo oss-sec mailing list archives

Re: glibc crypt(3), crypt_r(3), PHP crypt() may use alloca()
From: Jeff Law <law () redhat com>
Date: Fri, 30 Mar 2012 12:27:31 -0600

On 03/30/2012 12:17 PM, Solar Designer wrote:

Wow.  I thought we'd need to notify glibc developers more specifically
for this to happen, which I did not do yet for lack of decision on what
to do with the return value.
I think the right way to handle the return value is to return NULL for these cases. It's posix complaint and the glibc crypt routines already return NULL for exceptional conditions.


  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]