glibc/malloc
Siddhesh Poyarekar c9188d3337 memalign: reinstate alignment overflow check (CVE-2026-0861)
The change to cap valid sizes to PTRDIFF_MAX inadvertently dropped the
overflow check for alignment in memalign functions, _mid_memalign and
_int_memalign.  Reinstate the overflow check in _int_memalign, aligned
with the PTRDIFF_MAX change since that is directly responsible for the
CVE.  The missing _mid_memalign check is not relevant (and does not have
a security impact) and may need a different approach to fully resolve,
so it has been omitted.

CVE-Id: CVE-2026-0861
Vulnerable-Commit: 9bf8e29ca1
Reported-by: Igor Morgenstern, Aisle Research
Fixes: BZ #33796
Reviewed-by: Wilco Dijkstra <Wilco.Dijkstra@arm.com>
Signed-off-by: Siddhesh Poyarekar <siddhesh@gotplt.org>
2026-01-15 16:19:50 -05:00
..
Depend
Makefile malloc: Add tst-mallocfork to tests-exclude-threaded exception list 2026-01-15 17:00:08 +01:00
Versions malloc: add free_sized and free_aligned_sized from C23 2025-11-19 13:47:53 -03:00
alloc_buffer_alloc_array.c Update copyright dates with scripts/update-copyrights 2026-01-01 13:42:29 -08:00
alloc_buffer_allocate.c Update copyright dates with scripts/update-copyrights 2026-01-01 13:42:29 -08:00
alloc_buffer_copy_bytes.c Update copyright dates with scripts/update-copyrights 2026-01-01 13:42:29 -08:00
alloc_buffer_copy_string.c Update copyright dates with scripts/update-copyrights 2026-01-01 13:42:29 -08:00
alloc_buffer_create_failure.c Update copyright dates with scripts/update-copyrights 2026-01-01 13:42:29 -08:00
arena.c Update copyright dates with scripts/update-copyrights 2026-01-01 13:42:29 -08:00
dynarray-skeleton.c Update copyright dates with scripts/update-copyrights 2026-01-01 13:42:29 -08:00
dynarray.h Update copyright dates with scripts/update-copyrights 2026-01-01 13:42:29 -08:00
dynarray_at_failure.c Update copyright dates with scripts/update-copyrights 2026-01-01 13:42:29 -08:00
dynarray_emplace_enlarge.c Update copyright dates with scripts/update-copyrights 2026-01-01 13:42:29 -08:00
dynarray_finalize.c Update copyright dates with scripts/update-copyrights 2026-01-01 13:42:29 -08:00
dynarray_resize.c Update copyright dates with scripts/update-copyrights 2026-01-01 13:42:29 -08:00
dynarray_resize_clear.c Update copyright dates with scripts/update-copyrights 2026-01-01 13:42:29 -08:00
hooks.c Update copyright dates with scripts/update-copyrights 2026-01-01 13:42:29 -08:00
malloc-check.c Update copyright dates with scripts/update-copyrights 2026-01-01 13:42:29 -08:00
malloc-debug.c Update copyright dates with scripts/update-copyrights 2026-01-01 13:42:29 -08:00
malloc-internal.h Update copyright dates with scripts/update-copyrights 2026-01-01 13:42:29 -08:00
malloc.c memalign: reinstate alignment overflow check (CVE-2026-0861) 2026-01-15 16:19:50 -05:00
malloc.h Update copyright dates with scripts/update-copyrights 2026-01-01 13:42:29 -08:00
mallocbug.c
mcheck-impl.c Update copyright dates with scripts/update-copyrights 2026-01-01 13:42:29 -08:00
mcheck-init.c Update copyright dates with scripts/update-copyrights 2026-01-01 13:42:29 -08:00
mcheck.c Update copyright dates with scripts/update-copyrights 2026-01-01 13:42:29 -08:00
mcheck.h Update copyright dates with scripts/update-copyrights 2026-01-01 13:42:29 -08:00
memusage.c Update copyright dates with scripts/update-copyrights 2026-01-01 13:42:29 -08:00
memusage.sh Update copyright dates with scripts/update-copyrights 2026-01-01 13:42:29 -08:00
memusagestat.c Update copyright dates with scripts/update-copyrights 2026-01-01 13:42:29 -08:00
morecore.c Update copyright dates with scripts/update-copyrights 2026-01-01 13:42:29 -08:00
mtrace-impl.c Update copyright dates with scripts/update-copyrights 2026-01-01 13:42:29 -08:00
mtrace.c Update copyright dates with scripts/update-copyrights 2026-01-01 13:42:29 -08:00
mtrace.pl Update copyright dates not handled by scripts/update-copyrights 2026-01-01 13:42:29 -08:00
obstack.c Update copyright dates with scripts/update-copyrights 2026-01-01 13:42:29 -08:00
obstack.h Update copyright dates with scripts/update-copyrights 2026-01-01 13:42:29 -08:00
reallocarray.c Update copyright dates with scripts/update-copyrights 2026-01-01 13:42:29 -08:00
scratch_buffer_grow.c Update copyright dates with scripts/update-copyrights 2026-01-01 13:42:29 -08:00
scratch_buffer_grow_preserve.c Update copyright dates with scripts/update-copyrights 2026-01-01 13:42:29 -08:00
scratch_buffer_set_array_size.c Update copyright dates with scripts/update-copyrights 2026-01-01 13:42:29 -08:00
set-freeres.c Update copyright dates with scripts/update-copyrights 2026-01-01 13:42:29 -08:00
thread-freeres.c Update copyright dates with scripts/update-copyrights 2026-01-01 13:42:29 -08:00
tst-aligned-alloc-random-thread-cross.c Update copyright dates with scripts/update-copyrights 2026-01-01 13:42:29 -08:00
tst-aligned-alloc-random-thread.c Update copyright dates with scripts/update-copyrights 2026-01-01 13:42:29 -08:00
tst-aligned-alloc-random.c Update copyright dates with scripts/update-copyrights 2026-01-01 13:42:29 -08:00
tst-aligned-alloc-static.c
tst-aligned-alloc.c Update copyright dates with scripts/update-copyrights 2026-01-01 13:42:29 -08:00
tst-aligned_alloc-lib.c Update copyright dates with scripts/update-copyrights 2026-01-01 13:42:29 -08:00
tst-alloc_buffer.c Update copyright dates with scripts/update-copyrights 2026-01-01 13:42:29 -08:00
tst-calloc.c Update copyright dates with scripts/update-copyrights 2026-01-01 13:42:29 -08:00
tst-compathooks-off.c Update copyright dates with scripts/update-copyrights 2026-01-01 13:42:29 -08:00
tst-compathooks-on.c
tst-dynarray-at-fail.c Update copyright dates with scripts/update-copyrights 2026-01-01 13:42:29 -08:00
tst-dynarray-fail.c Update copyright dates with scripts/update-copyrights 2026-01-01 13:42:29 -08:00
tst-dynarray-shared.h Update copyright dates with scripts/update-copyrights 2026-01-01 13:42:29 -08:00
tst-dynarray.c Update copyright dates with scripts/update-copyrights 2026-01-01 13:42:29 -08:00
tst-free-aligned-sized-trace.c Update copyright dates with scripts/update-copyrights 2026-01-01 13:42:29 -08:00
tst-free-aligned-sized.c Update copyright dates with scripts/update-copyrights 2026-01-01 13:42:29 -08:00
tst-free-errno.c Update copyright dates with scripts/update-copyrights 2026-01-01 13:42:29 -08:00
tst-free-sized-trace.c Update copyright dates with scripts/update-copyrights 2026-01-01 13:42:29 -08:00
tst-free-sized.c Update copyright dates with scripts/update-copyrights 2026-01-01 13:42:29 -08:00
tst-interpose-aux-nothread.c Update copyright dates with scripts/update-copyrights 2026-01-01 13:42:29 -08:00
tst-interpose-aux-thread.c Update copyright dates with scripts/update-copyrights 2026-01-01 13:42:29 -08:00
tst-interpose-aux.c Update copyright dates with scripts/update-copyrights 2026-01-01 13:42:29 -08:00
tst-interpose-aux.h Update copyright dates with scripts/update-copyrights 2026-01-01 13:42:29 -08:00
tst-interpose-nothread.c Update copyright dates with scripts/update-copyrights 2026-01-01 13:42:29 -08:00
tst-interpose-skeleton.c Update copyright dates with scripts/update-copyrights 2026-01-01 13:42:29 -08:00
tst-interpose-static-nothread.c Update copyright dates with scripts/update-copyrights 2026-01-01 13:42:29 -08:00
tst-interpose-static-thread.c Update copyright dates with scripts/update-copyrights 2026-01-01 13:42:29 -08:00
tst-interpose-thread.c Update copyright dates with scripts/update-copyrights 2026-01-01 13:42:29 -08:00
tst-mallinfo2.c Update copyright dates with scripts/update-copyrights 2026-01-01 13:42:29 -08:00
tst-malloc-alternate-path.c Update copyright dates with scripts/update-copyrights 2026-01-01 13:42:29 -08:00
tst-malloc-aux.h Update copyright dates with scripts/update-copyrights 2026-01-01 13:42:29 -08:00
tst-malloc-backtrace.c Update copyright dates with scripts/update-copyrights 2026-01-01 13:42:29 -08:00
tst-malloc-check.c Update copyright dates with scripts/update-copyrights 2026-01-01 13:42:29 -08:00
tst-malloc-fork-deadlock.c Update copyright dates with scripts/update-copyrights 2026-01-01 13:42:29 -08:00
tst-malloc-random.c Update copyright dates with scripts/update-copyrights 2026-01-01 13:42:29 -08:00
tst-malloc-stats-cancellation.c
tst-malloc-tcache-leak.c Update copyright dates with scripts/update-copyrights 2026-01-01 13:42:29 -08:00
tst-malloc-thread-exit.c Update copyright dates with scripts/update-copyrights 2026-01-01 13:42:29 -08:00
tst-malloc-thread-fail.c Update copyright dates with scripts/update-copyrights 2026-01-01 13:42:29 -08:00
tst-malloc-too-large.c memalign: reinstate alignment overflow check (CVE-2026-0861) 2026-01-15 16:19:50 -05:00
tst-malloc-usable-tunables.c
tst-malloc-usable.c Update copyright dates with scripts/update-copyrights 2026-01-01 13:42:29 -08:00
tst-malloc.c Update copyright dates with scripts/update-copyrights 2026-01-01 13:42:29 -08:00
tst-malloc_info.c Update copyright dates with scripts/update-copyrights 2026-01-01 13:42:29 -08:00
tst-mallocalign1.c Update copyright dates with scripts/update-copyrights 2026-01-01 13:42:29 -08:00
tst-mallocfork.c
tst-mallocfork2.c Update copyright dates with scripts/update-copyrights 2026-01-01 13:42:29 -08:00
tst-mallocfork3.c Update copyright dates with scripts/update-copyrights 2026-01-01 13:42:29 -08:00
tst-mallocstate.c Update copyright dates with scripts/update-copyrights 2026-01-01 13:42:29 -08:00
tst-mallopt.c Update copyright dates with scripts/update-copyrights 2026-01-01 13:42:29 -08:00
tst-memalign-2.c Update copyright dates with scripts/update-copyrights 2026-01-01 13:42:29 -08:00
tst-memalign-3.c Update copyright dates with scripts/update-copyrights 2026-01-01 13:42:29 -08:00
tst-memalign.c Update copyright dates with scripts/update-copyrights 2026-01-01 13:42:29 -08:00
tst-mtrace.c Update copyright dates with scripts/update-copyrights 2026-01-01 13:42:29 -08:00
tst-mtrace.sh Update copyright dates with scripts/update-copyrights 2026-01-01 13:42:29 -08:00
tst-obstack.c
tst-posix_memalign.c Update copyright dates with scripts/update-copyrights 2026-01-01 13:42:29 -08:00
tst-pvalloc-fortify.c Update copyright dates with scripts/update-copyrights 2026-01-01 13:42:29 -08:00
tst-pvalloc.c Update copyright dates with scripts/update-copyrights 2026-01-01 13:42:29 -08:00
tst-realloc.c Update copyright dates with scripts/update-copyrights 2026-01-01 13:42:29 -08:00
tst-reallocarray.c Update copyright dates with scripts/update-copyrights 2026-01-01 13:42:29 -08:00
tst-safe-linking.c Update copyright dates with scripts/update-copyrights 2026-01-01 13:42:29 -08:00
tst-scratch_buffer.c Update copyright dates with scripts/update-copyrights 2026-01-01 13:42:29 -08:00
tst-tcfree1.c Update copyright dates with scripts/update-copyrights 2026-01-01 13:42:29 -08:00
tst-tcfree2.c Update copyright dates with scripts/update-copyrights 2026-01-01 13:42:29 -08:00
tst-tcfree3.c Update copyright dates with scripts/update-copyrights 2026-01-01 13:42:29 -08:00
tst-tcfree4.c Update copyright dates with scripts/update-copyrights 2026-01-01 13:42:29 -08:00
tst-trim1.c
tst-valloc.c Update copyright dates with scripts/update-copyrights 2026-01-01 13:42:29 -08:00