0009283: integer overflow in GNUNET_xnew_array_2d_ and GNUNET_xnew_array_3d_

ID	Project	Category	View Status	Date Submitted	Last Update

0009283	GNUnet	util library	public	2024-10-21 14:11	2024-10-23 21:40

Reporter	fefe	Assigned To	schanzen
Priority	normal	Severity	minor	Reproducibility	have not tried
Status	resolved	Resolution	fixed

Summary	0009283: integer overflow in GNUNET_xnew_array_2d_ and GNUNET_xnew_array_3d_
Description	Both functions just take the sizes they get as arguments at face value and do not check for numeric overflow. Luckily both functions appear to be completely unused. Why are they there at all, I wonder?
Tags	No tags attached.

Date Modified	Username	Field	Change
2024-10-21 14:11	fefe	New Issue
2024-10-23 21:40	schanzen	Changeset attached	=> gnunet master d214f12d
2024-10-23 21:40	schanzen	Note Added: 0023580
2024-10-23 21:40	schanzen	Assigned To	=> schanzen
2024-10-23 21:40	schanzen	Status	new => resolved
2024-10-23 21:40	schanzen	Resolution	open => fixed

gnunet: master d214f12d 2024-10-23 23:39 schanzen Details Diff	util: Removed GNUNET_xnew_array_* and friends. Fixes 0009283	Affected Issues 0009283
	mod - src/include/gnunet_common.h	Diff File
	mod - src/lib/util/common_allocation.c	Diff File
	mod - src/lib/util/test_common_allocation.c	Diff File

schanzen 2024-10-23 21:40 administrator ~0023580	Fix committed to master branch.