API freeze break request for glib



Hi,

I'd like to request API freeze break to add the following 6 new functions to glib:

g_malloc_n
g_malloc0_n
g_realloc_n
g_try_malloc_n
g_try_malloc0_n
g_try_realloc_n

These are similar to their regular version but take two numbers instead, say A
and B, and allocate A*B bytes, taking care of the possible overflow.  What
these allow us to do is redefine the g_new() family of allocators to avoid the
overflow that can currently happen in them.

Since this is fixing an entire class of security issues, we would like to get
it in this cycle instead of next.

The complete patch is available at:

  https://bugzilla.gnome.org/show_bug.cgi?id=608196

Thanks,
behdad


[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]