netdev
[Top] [All Lists]

Re: [CRYPTO] Fix stack overrun in crypt()

To: James Morris <jmorris@xxxxxxxxxx>
Subject: Re: [CRYPTO] Fix stack overrun in crypt()
From: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>
Date: Sat, 17 Jul 2004 19:48:29 +1000
Cc: "David S. Miller" <davem@xxxxxxxxxx>, netdev@xxxxxxxxxxx
In-reply-to: <20040717074319.GA18919@xxxxxxxxxxxxxxxxxxx>
References: <20040715114840.GA1325@xxxxxxxxxxxxxxxxxxx> <Pine.LNX.4.58.0407161126350.13406@xxxxxxxxxxxxxxxxxxxxxxxx> <20040717074319.GA18919@xxxxxxxxxxxxxxxxxxx>
Sender: netdev-bounce@xxxxxxxxxxx
User-agent: Mutt/1.5.6+20040523i
On Sat, Jul 17, 2004 at 05:43:19PM +1000, herbert wrote:
> 
> Unfortunately it looks like we still have a problem. gcc 3.3.4 appears
> to be generating incorrect output on i386 with the dynamic stack
> allocation used in crypt() and the functions around it.
> 
> In particular, it can give you 8 bytes when you ask for 16 bytes.
> See my report at http://bugs.debian.org/259887 for details.

I got it wrong.  gcc is simply allocating some (12 bytes) of the
space unconditionally.

Sorry for the noise.
-- 
Visit Openswan at http://www.openswan.org/
Email: Herbert Xu ~{PmV>HI~} <herbert@xxxxxxxxxxxxxxxxxxx>
Home Page: http://gondor.apana.org.au/~herbert/
PGP Key: http://gondor.apana.org.au/~herbert/pubkey.txt

<Prev in Thread] Current Thread [Next in Thread>