Re: buffer overrun in rtems_rfs_bitmap_create_search()

2018-06-04 Thread Joel Sherrill
e you using? I think the problem also affects the > > master branch, but we need a ticket for each affected open branch. > > > > The fix looks OK to me, but I'd like Chris Johns to approve it. I > > assigned the ticket to him. > > &g

Re: buffer overrun in rtems_rfs_bitmap_create_search()

2018-06-04 Thread Gedare Bloom
d the ticket to him. Gedare On Wed, May 30, 2018 at 1:24 PM, Walter Lee wrote: > Hi. I am encountering a buffer overrun in > rtems_rfs_bitmap_create_search(). It seems that whenever the bitmap > uses the last bit of its search_map (i.e. (control->size + 31) % 32 == > 32)), the lo

buffer overrun in rtems_rfs_bitmap_create_search()

2018-05-30 Thread Walter Lee
Hi. I am encountering a buffer overrun in rtems_rfs_bitmap_create_search(). It seems that whenever the bitmap uses the last bit of its search_map (i.e. (control->size + 31) % 32 == 32)), the loop will write to the word one beyond the end of search_map. I filed a bug at https://devel.rtems.