| शीर्षक | GNU C Library (glibc) gmon allocated buffer overflow |
|---|
| विवरण | The call graph monitor (gmon) has a buffer overflow flaw.
Rounding up is missing during calculating the required size of the internal buffer.
It results in writing beyond the allocated buffer when an added call-graph arc address is near to the end of the monitored address range.
This flaw is minor and nonhazardous since effects only if the call graph monitor is activated, i.e. when local profiling is performed.
However, this bug is quite unpleasant for the developer, as it can distort a profiling results (run-to-run with ASLR) and lead to a memory corruption.
It is this issue that is the cause of many heisengbus noticed when using gprof (GNU Profiler) and gcov (GNU coverage testing tool). |
|---|
| स्रोत | ⚠️ https://sourceware.org/bugzilla/show_bug.cgi?id=29444 |
|---|
| उपयोगकर्ता | erthink (UID 40381) |
|---|
| सबमिशन | 06/02/2023 06:26 PM (4 साल पहले) |
|---|
| संयम | 06/02/2023 07:56 PM (2 hours later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 220246 [GNU C Library 2.38 Call Graph Monitor gmon.c __monstartup बफ़र ओवरफ़्लो] |
|---|
| अंक | 20 |
|---|