diff options
| author | vlefevre <vlefevre@280ebfd0-de03-0410-8827-d642c229c3f4> | 2011-05-02 13:01:30 +0000 |
|---|---|---|
| committer | vlefevre <vlefevre@280ebfd0-de03-0410-8827-d642c229c3f4> | 2011-05-02 13:01:30 +0000 |
| commit | 4dfc55fc3a75ab1521eb581886f70010a8494e28 (patch) | |
| tree | 3e6398e5b3ca7464c614d864afff0cc27672e00d /src/rec_sqrt.c | |
| parent | caa7ff77e091d264043a5d700defde147476927e (diff) | |
| download | mpfr-4dfc55fc3a75ab1521eb581886f70010a8494e28.tar.gz | |
[src/rec_sqrt.c] Added a comment about a buffer overflow. Bug report:
https://gforge.inria.fr/tracker/index.php?func=detail&aid=12553&group_id=136&atid=619
git-svn-id: svn://scm.gforge.inria.fr/svn/mpfr/trunk@7649 280ebfd0-de03-0410-8827-d642c229c3f4
Diffstat (limited to 'src/rec_sqrt.c')
| -rw-r--r-- | src/rec_sqrt.c | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/src/rec_sqrt.c b/src/rec_sqrt.c index 48e2f4dad..164394f2b 100644 --- a/src/rec_sqrt.c +++ b/src/rec_sqrt.c @@ -381,6 +381,7 @@ mpfr_mpn_rec_sqrt (mpfr_limb_ptr x, mpfr_prec_t p, MPN_COPY (x, u, ln); cy = mpn_add (x + ln, x + ln, xn, u + ln, un - ln); /* add cu at x+un */ + /* FIXME: x[un] is not necessarily allocated. Buffer overflow! */ cy += mpn_add_1 (x + un, x + un, th, cu); } else /* negative case */ |