Subject: Re: bug#76907: Potential buffer overflow in getsockopt
From: Rob Browning <[email-masked]>
To: Mike Gran <[email-masked]>, [email-masked]
Date: Tue, 18 Mar 2025 14:36:31 -0500
List-Id: <debbugs-submit.debbugs.gnu.org>

Mike Gran via "Bug reports for GUILE, GNU's Ubiquitous Extension
Language" <[email-masked]> writes:

> struct timeval is a potential return value of struct getsockopt, but,
> when HAVE_STRUCT_LINGER is not defined, scm_t_getsockopt_result may
> be too small to hold a struct timeval.

Pushed to main along with a commit to add -Werror=array-bounds when
available which would have caught the issue.

Thanks
-- 
Rob Browning
rlb @defaultvalue.org and @debian.org
GPG as of 2011-07-10 E6A9 DA3C C9FD 1FF8 C676 D2C4 C0F0 39E9 ED1B 597A
GPG as of 2002-11-03 14DD 432F AE39 534D B592 F9A0 25C8 D377 8C7E 73A4