------- Comment #2 from felix-gcc at fefe dot de  2008-03-14 19:58 -------
I am aware of -Wconversion, but I am not interested in ALL conversion
truncations.  Truncation happens to be a security issue in a few cases, in many
other cases it would just be a regular bug.  My suggestions aims to isolate the
security relevant cases, for the rest we have -Wconversion.

If the size_t given to memcpy is truncated, that does not overwrite a buffer.
But if the size_t given to malloc is truncated, that is a pretty surefire way
to find a security issue.


-- 


http://gcc.gnu.org/bugzilla/show_bug.cgi?id=35592

Reply via email to