re: two vulns in uClibc-0.9.33.2

["fefe" <qbenjin () qq com>]

> > I tried to cross-compile attached code and run it in
> > qemu-system-arm.

> > What should be the result?


Use -fsanitize=address , otherwise it do not crash.



> > a segfault for poc2.c. But this also happens with glibc
> > based system.

> > Is the complete app code just plain wrong?
> > Can you provide full application code and the results showing the
> > issue?

I think glibc is also affected,  if some servers, like php server, use glibc or uclibc to parser regular expression 
which is inputed by users, it can case DDOS.