https://sourceware.org/bugzilla/show_bug.cgi?id=28933
--- Comment #5 from Nick Alcock <nick.alcock at oracle dot com> --- This unchecked length is only an overrun in the uncompressed-and-corrupted foreign-endian CTF case (it's still wrong if the CTF is uncompressed but native-endian, but it's only used at serialization time, which is something you can't do to a dict you read out of a CTF section, since those are read-only). So, fairly obscure. Still not sure why it didn't happen to me: I can make it happen with a new testcase easily now. (Fixed, I think: will test my fix properly tomorrow.) -- You are receiving this mail because: You are on the CC list for the bug.