New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Potential Integer Overflow vulnerability in Clp/src/unitTest.cpp #200

Open

KSB21ST opened this issue Aug 18, 2021 · 0 comments

KSB21ST commented Aug 18, 2021

Hi,
It seems that there exists a potential integer overflow. Please find the following description:

numberRows can be an arbitrary large number

Clp/Clp/src/unitTest.cpp

Line 2373 in d4ccc9a

x = fscanf(fp, "%*s %*s %d %d %*s %*s %d %*s", &problem, &numberRows,
Call to malloc with the large integer can cause a memory allocation with an overflowed size

Clp/Clp/src/unitTest.cpp

Line 2412 in d4ccc9a

int *cost = new int[2 * numberColumns];

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment