[STDCXX-989] [EDG C++ 3.9] definition of jmp_buf causes buffer overflow

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 4.2.x
• Fix Version/s: 4.2.x
• Component/s: 18. Language Support

Environment

Linux/EDG C++ 3.9

• Severity: Incorrect Behavior
• Assignee: Martin Sebor
• Reporter: Travis Vitek
• Created: 10/Jul/08 20:30
• Updated: 11/Jul/08 04:03
• Resolved: 11/Jul/08 04:02

Description

The jmp_buf definition provided in include/ansi/_csetjmp.h is not as large as setjmp() is expecting. This causes a buffer overflow when running tests that use the test driver (rw_test), which results in data corruption. If you run the tests with --trace, you will see that the clause field of the output is always corrupt after the first use.

The following shows the expected size for us...

$ cat u.cpp; eccp u.cpp && ./a.out
#include <setjmp.h>
#include <stdio.h>

int main ()
{
    printf ("%u\n", sizeof (jmp_buf));
    return 0;
}
156

The definition of jmp_buf in include/rw/_csetjmp.h is a buffer of 8 bytes.