binutils and _FORTIFY_SOURCE

Alan Modra amodra@bigpond.net.au
Sun Nov 20 22:06:00 GMT 2005
On Sun, Nov 20, 2005 at 09:46:44AM -0800, Anthony Green wrote:
> typedef struct
> {
>   char foo[4];
>   int  bar;
> } mystruct;
> 
> we see code kind of like...
> 
>   mystruct s;
>   strcpy (s.foo, "1234");  /* buffer overflow here */
>   s.bar = 5; 		   /* but it doesn't really matter */
> 
> Has anybody looked into this before?
> Will you accept patches to remove false _FORTIFY_SOURCE errors?

Yes.  The above really ought to be using memcpy.

-- 
Alan Modra
IBM OzLabs - Linux Technology Centre



More information about the Binutils mailing list