https://sourceware.org/bugzilla/show_bug.cgi?id=28933

--- Comment #5 from Nick Alcock <nick.alcock at oracle dot com> ---
This unchecked length is only an overrun in the uncompressed-and-corrupted
foreign-endian CTF case (it's still wrong if the CTF is uncompressed but
native-endian, but it's only used at serialization time, which is something you
can't do to a dict you read out of a CTF section, since those are read-only).
So, fairly obscure. Still not sure why it didn't happen to me: I can make it
happen with a new testcase easily now.

(Fixed, I think: will test my fix properly tomorrow.)

-- 
You are receiving this mail because:
You are on the CC list for the bug.

Reply via email to