oss-sec mailing list archives

Re: CVE request: musl libc 1.1.23 and earlier x87 float stack imbalance

From: Moritz Muehlenhoff <jmm () inutil org>
Date: Tue, 6 Aug 2019 09:16:09 +0200

On Mon, Aug 05, 2019 at 07:27:37PM -0400, Rich Felker wrote:

I've discovered a flaw in musl libc's arch-specific math assembly code
for i386, whereby at least the log1p function and possibly others
return with more than one item on the x87 stack.


Given that the Subject: mentions a CVE request; these are no longer
handled via the oss-security mailing list. Please use
https://cveform.mitre.org/ instead.

Cheers,
        Moritz

Current thread:

CVE request: musl libc 1.1.23 and earlier x87 float stack imbalance Rich Felker (Aug 05)
- Re: [musl] CVE request: musl libc 1.1.23 and earlier x87 float stack imbalance Rich Felker (Aug 05)
  - Re: [musl] CVE request: musl libc 1.1.23 and earlier x87 float stack imbalance Rich Felker (Aug 06)
- Re: CVE request: musl libc 1.1.23 and earlier x87 float stack imbalance Moritz Muehlenhoff (Aug 06)