dovecot-2.2: safe_memset(size=0) triggered read access to data[0...
dovecot at dovecot.org
dovecot at dovecot.org
Fri Apr 25 12:53:00 UTC 2014
details: http://hg.dovecot.org/dovecot-2.2/rev/eae44873dbc2
changeset: 17265:eae44873dbc2
user: Timo Sirainen <tss at iki.fi>
date: Fri Apr 25 15:52:37 2014 +0300
description:
safe_memset(size=0) triggered read access to data[0], possibly crashing.
diffstat:
src/lib/safe-memset.c | 3 +++
1 files changed, 3 insertions(+), 0 deletions(-)
diffs (13 lines):
diff -r b433260ced36 -r eae44873dbc2 src/lib/safe-memset.c
--- a/src/lib/safe-memset.c Fri Apr 25 15:46:20 2014 +0300
+++ b/src/lib/safe-memset.c Fri Apr 25 15:52:37 2014 +0300
@@ -8,6 +8,9 @@
volatile unsigned int volatile_zero_idx = 0;
volatile unsigned char *p = data;
+ if (size == 0)
+ return;
+
do {
memset(data, c, size);
} while (p[volatile_zero_idx] != c);
More information about the dovecot-cvs
mailing list