[exim-dev] [Bug 3047] bad internal_store_malloc request (214…

https://bugs.exim.org/show_bug.cgi?id=3047

Andrew Aitchison <exim@???> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |exim@???

--- Comment #13 from Andrew Aitchison <exim@???> ---
# git show c3d7f28680 exim.c
commit c3d7f28680dda05ca6d8415cffbff8a233c0ae74
Author: Jeremy Harris <jgh146exb@???>
Date: Fri Jun 10 11:54:17 2022 +0100

    Use pool storage for regex operations

diff --git a/src/src/exim.c b/src/src/exim.c
index eac0cb2b9..052c6bf5c 100644
--- a/src/src/exim.c
+++ b/src/src/exim.c
@@ -59,6 +59,18 @@ if (block) store_free(block);
}

+static void *
+function_store_get(PCRE2_SIZE size, void * tag)
+{
+return store_get((int)size, GET_UNTAINTED);    /* loses track of taint */
+}
...

... so function_store_get truncates the size if asked to allocate more than
2GB.

This change happened after Exim 4.96.

--
You are receiving this mail because:
You are on the CC list for the bug.

--
## subscription configuration (requires account):
## https://lists.exim.org/mailman3/postorius/lists/exim-dev.lists.exim.org/
## unsubscribe (doesn't require an account):
## exim-dev-unsubscribe@???
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/