[Bug other/54411] libiberty: objalloc_alloc integer overflows (CVE-2012-3509)

[fw at gcc dot gnu.org]

http://gcc.gnu.org/bugzilla/show_bug.cgi?id=54411

--- Comment #3 from Florian Weimer <fw at gcc dot gnu.org> 2012-08-29 19:18:58 
UTC ---
(In reply to comment #2)
> You do realise that pretty much nothing in the toolchain checks for 
> overflows in calculating allocation sizes?

bfd_alloc2 (bfd's XNEWVEC variant) contains an overflow check, and this bug
defeats it.

Your point about XNEWVEC is appreciated, but this is a different bug. 8-)