linux-kernel - Re: Buggy variable-length array code...or compiler?

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date:	Fri, 26 Feb 2010 00:23:45 +0100
From:	Samuel Thibault <samuel.thibault@...-lyon.org>
To:	"Steven J. Magnani" <steve@...idescorp.com>
Cc:	linux-kernel@...r.kernel.org, microblaze-uclinux@...e.uq.edu.au,
	dan.j.williams@...el.com
Subject: Re: Buggy variable-length array code...or compiler?

IIRC C99 allows VLAs to not be freed immediately, but at function
termination, which makes things way simpler to implement for compilers.
I've noticed it on Solaris and cell's spugcc.

Steven J. Magnani, le Thu 25 Feb 2010 17:17:29 -0600, a écrit :
> 1. There is a coding error in dmatest

It needs to get out of the function from times to times to free the
VLAs.

> 2. There is a bug specific to Microblaze gcc compiler(s) [mine is 4.1.2]
> 3. There is a bug generic to specific versions of gcc compilers
> 4. There is a bug generic to all gcc compilers

I've usually seen gcc free VLAs as soon as possible, so I believe it's
only a few targets.

Samuel
--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/