lib/glibc
1
0
Fork 0
mirror of https://sourceware.org/git/glibc.git synced 2025-07-29 11:41:21 +03:00
Code Activity

Fix integer overflow in sysdeps/unix/sysv/linux/bits/sched.h

Browse Source 
[BZ #15448]
	* sysdeps/unix/sysv/linux/bits/sched.h (__CPU_SET_S)
	(__CPU_CLR_S, __CPU_ISSET_S): Avoid integer overflow.
This commit is contained in:
Andreas Jaeger
2013-05-10 20:28:40 +02:00
parent 51df539d98
commit 8a67a4b343
3 changed files with 11 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
ChangeLog
View File

@ -1,3 +1,9 @@
2013-05-10 Andreas Jaeger <aj@suse.de>
[BZ #15448]
* sysdeps/unix/sysv/linux/bits/sched.h (__CPU_SET_S)
(__CPU_CLR_S, __CPU_ISSET_S): Avoid integer overflow.
2013-05-10 Joseph Myers <joseph@codesourcery.com> 2013-05-10 Joseph Myers <joseph@codesourcery.com>
* math/gen-libm-test.pl (adjust_arg): New function. * math/gen-libm-test.pl (adjust_arg): New function.

3
NEWS
View File

@ -16,7 +16,8 @@ Version 2.18
15055, 15062, 15078, 15084, 15085, 15086, 15160, 15214, 15221, 15232, 15055, 15062, 15078, 15084, 15085, 15086, 15160, 15214, 15221, 15232,
15234, 15283, 15285, 15287, 15304, 15305, 15307, 15309, 15327, 15330, 15234, 15283, 15285, 15287, 15304, 15305, 15307, 15309, 15327, 15330,
15335, 15336, 15337, 15342, 15346, 15359, 15361, 15366, 15380, 15394, 15335, 15336, 15337, 15342, 15346, 15359, 15361, 15366, 15380, 15394,
15395, 15405, 15406, 15409, 15416, 15418, 15419, 15423, 15426, 15429. 15395, 15405, 15406, 15409, 15416, 15418, 15419, 15423, 15426, 15429,
15448.
* CVE-2013-0242 Buffer overrun in regexp matcher has been fixed (Bugzilla * CVE-2013-0242 Buffer overrun in regexp matcher has been fixed (Bugzilla
#15078). #15078).

6
sysdeps/unix/sysv/linux/bits/sched.h
View File

@ -144,21 +144,21 @@ typedef struct
# define __CPU_SET_S(cpu, setsize, cpusetp) \ # define __CPU_SET_S(cpu, setsize, cpusetp) \
(__extension__ \ (__extension__ \
({ size_t __cpu = (cpu); \ ({ size_t __cpu = (cpu); \
__cpu < 8 * (setsize) \ __cpu / 8 < (setsize) \
? (((__cpu_mask *) ((cpusetp)->__bits))[__CPUELT (__cpu)] \ ? (((__cpu_mask *) ((cpusetp)->__bits))[__CPUELT (__cpu)] \
|= __CPUMASK (__cpu)) \ |= __CPUMASK (__cpu)) \
: 0; })) : 0; }))
# define __CPU_CLR_S(cpu, setsize, cpusetp) \ # define __CPU_CLR_S(cpu, setsize, cpusetp) \
(__extension__ \ (__extension__ \
({ size_t __cpu = (cpu); \ ({ size_t __cpu = (cpu); \
__cpu < 8 * (setsize) \ __cpu / 8 < (setsize) \
? (((__cpu_mask *) ((cpusetp)->__bits))[__CPUELT (__cpu)] \ ? (((__cpu_mask *) ((cpusetp)->__bits))[__CPUELT (__cpu)] \
&= ~__CPUMASK (__cpu)) \ &= ~__CPUMASK (__cpu)) \
: 0; })) : 0; }))
# define __CPU_ISSET_S(cpu, setsize, cpusetp) \ # define __CPU_ISSET_S(cpu, setsize, cpusetp) \
(__extension__ \ (__extension__ \
({ size_t __cpu = (cpu); \ ({ size_t __cpu = (cpu); \
__cpu < 8 * (setsize) \ __cpu / 8 < (setsize) \
? ((((const __cpu_mask *) ((cpusetp)->__bits))[__CPUELT (__cpu)] \ ? ((((const __cpu_mask *) ((cpusetp)->__bits))[__CPUELT (__cpu)] \
& __CPUMASK (__cpu))) != 0 \ & __CPUMASK (__cpu))) != 0 \
: 0; })) : 0; }))