CVE-2002-2439

Published: 23 October 2019

operator new[] sometimes returns pointers to heap blocks which are too small. When a new array is allocated, the C++ run-time has to calculate its size. The product may exceed the maximum value which can be stored in a machine register. This error is ignored, and the truncated value is used for the heap allocation. This may lead to heap overflows and therefore security bugs. (See http://cert.uni-stuttgart.de/advisories/calloc.php for further references.)

Notes

fixed upstream in gcc 4.8.0
backporting fixes may be problematic for ABI issues
gcc-i686-linux-android/xenial is 4.7.4 based

gcc-4.7 is not the default xenial compiler and is only used to
build a few packages. Fixing this would be intrusive, would
require rebuilding those packages, and there is no clear
attack vector on them. We will not be fixing gcc-4.7 in xenial.
Marking as ignored.

Status

References

• https://www.cve.org/CVERecord?id=CVE-2002-2439
• NVD
• Launchpad
• Debian

Bugs

• http://gcc.gnu.org/bugzilla/show_bug.cgi?id=19351
• https://bugzilla.redhat.com/show_bug.cgi?id=850911