Buffer overrun in GMP functions mpz_root, mpz_rootrem

Torbjorn Granlund tg at swox.com
Fri Apr 8 12:02:58 CEST 2005


There is a buffer overrun in the internal GMP function
mpn_rootrem, affecting the pblic functions mpz_root and
mpz_rootrem.  The potential overrun is a function of input
operand size, i.e., with large operands the overrun can be large.

The patch below addresses the problem.

The following GMP releases are affected: 4.1, 4.1.1, 4.1.2,
4.1.3, and 4.1.4.

(All followups to the bugs or discuss list, as appropriate, please.)

-------------- next part --------------
A non-text attachment was scrubbed...
Name: mpn_rootrem.c.diff
Type: text/x-patch
Size: 813 bytes
Desc: not available
Url : http://gmplib.org/list-archives/gmp-announce/attachments/20050408/320af0b0/mpn_rootrem.c.bin
-------------- next part --------------

-- 
Torbj?rn


More information about the gmp-announce mailing list