GNU bug report logs - #78880
od Heap-buffer overflow

Previous Next

Package: coreutils;

Reported by: Jaehoon Jang <jaehoon.jang <at> prosys.kaist.ac.kr>

Date: Mon, 23 Jun 2025 19:13:05 UTC

Severity: normal

Done: Pádraig Brady <P <at> draigBrady.com>

Bug is archived. No further changes may be made.

Full log


View this message in rfc822 format

From: Grisha Levit <grishalevit <at> gmail.com>
To: Collin Funk <collin.funk1 <at> gmail.com>
Cc: 78880 <at> debbugs.gnu.org, Pádraig Brady <P <at> draigbrady.com>
Subject: bug#78880: od Heap-buffer overflow
Date: Fri, 27 Jun 2025 12:19:12 -0400
On Tue, Jun 24, 2025, 12:34 Collin Funk <collin.funk1 <at> gmail.com> wrote:
>
> Pádraig Brady <P <at> draigBrady.com> writes:
>
> > On 24/06/2025 15:27, Grisha Levit wrote:
> >
> >> This part:
> >>
> >>>         tryline:
> >>>     +     idx_t i = 0;
> >>>     +     int c = 1; /* Init to 1 so can distinguish if NUL read. */
> >> triggers
> >>      warning: label followed by a declaration is a C23 extension
> >> [-Wc23-extensions]
> >
> > OK version 3 attached which simplifies
> > by removing the label and gotos entirely.
>
> Grisha, what did you pass to ./configure?
>
> I'm suprised we don't disable this in Gnulib. Since there we do:
>
>     static_assert (1 < sizeof (example))
>
> Without a second argument message string, I would expect Clang to
> complain about it, unless we disable it.

Sorry, TBH I didn't do a proper build, I just remembered the
discussion at [1] while reading the patch.

[1] https://lists.gnu.org/r/bug-gnulib/2024-04/msg00044.html




This bug report was last modified 1 day ago.

Previous Next


GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.