Bug#482698: CVE-2008-1685: removes possible protection mechanism against overflows

2008-05-24 Thread Brad Roberts
See this long thread on the gcc list for issues with that CVE: http://gcc.gnu.org/ml/gcc/2008-04/msg00115.html Later, Brad -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Bug#482698: CVE-2008-1685: removes possible protection mechanism against overflows

2008-05-24 Thread Bastian Blank
On Sun, May 25, 2008 at 12:17:22AM +1000, Steffen Joeris wrote: > gcc 4.2.0 through 4.3.0 in GNU Compiler Collection, when casts are not > used, considers the sum of a pointer and an int to be greater than or > equal to the pointer, which might remove length testing code that was > intended as a pr

Bug#482698: CVE-2008-1685: removes possible protection mechanism against overflows

2008-05-24 Thread Steffen Joeris
Package: gcc-4.3 Severity: important Tags: security Hi The following CVE(0) has been issued against gcc. CVE-2008-1685: gcc 4.2.0 through 4.3.0 in GNU Compiler Collection, when casts are not used, considers the sum of a pointer and an int to be greater than or equal to the pointer, which might