[Top][All Lists]
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: branch-1_4 regexp coredump
From: |
Eric Blake |
Subject: |
Re: branch-1_4 regexp coredump |
Date: |
Fri, 18 Aug 2006 04:27:30 +0000 (UTC) |
User-agent: |
Loom/3.14 (http://gmane.org/) |
Eric Blake <ebb9 <at> byu.net> writes:
>
> Karl's observation on bug-m4 that we had a bogus warning pointed out
something
> even more severe - we were reading uninitialized memory from the stack.
> Depending on your hardware, you can get allocation failures, core dumps, and
> possibly even arbitrary code execution.
I still need to work on this. We have a memory leak (and have done, since m4
0.75 when regexp was introduced), because re_search allocates memory in
re_registers on success if we haven't done it ourselves.
--
Eric Blake