News for hackers. Stuff that matters.

A comment on size_t-to-int vulnerability in Linux’s filesystem layer. Parent comment

Re:size_t-to-int vulnerability in Linux’s filesystem layer by sinsterizme on Tuesday July 20, 2021 @07:20PM (#27900488)
Shouldn't this PR also use `free` on the duped string before returning? (I never use C so probably missing something but just based on the docs of strdupa...)
[ Parent | on HN ]
Re:size_t-to-int vulnerability in Linux’s filesystem layer by rtldg on Tuesday July 20, 2021 @07:40PM (#27900601)
The variable p is now declared with "_cleanup_free_" which is using some compiler cleanup/destructor attribute stuff to run free
[ Parent | on HN ]
Re:size_t-to-int vulnerability in Linux’s filesystem layer by sinsterizme on Tuesday July 20, 2021 @08:16PM (#27900837)
ah okay, thank you :)
[ Parent | on HN ]