[gnutls-devel] GnuTLS | Undefined behavior in _gnutls_resolve_priorities() (#1940)

(Deprecated) Read-only notification of GnuTLS library development activities gnutls-devel at lists.gnutls.org
Tue Aug 18 19:16:02 CEST 2026



Issue created by Tim Rühsen: https://gitlab.com/gnutls/gnutls/-/work_items/1940



At https://gitlab.com/gnutls/gnutls/-/blob/master/lib/priority.c?ref_type=heads#L2560, we subtract a potential NULL pointer (`additional`) and a non-NULL pointer (`ss_next`), which is UB.

This is a finding of `scan-build` 22.

-- 
Reply to this email directly or view it on GitLab: https://gitlab.com/gnutls/gnutls/-/work_items/1940
You're receiving this email because of your account on gitlab.com. Unsubscribe from this thread: https://gitlab.com/-/namespace/17175643/sent_notifications/6-cuwdyeec4wkycty7gc7ja0vvu-a84t7/unsubscribe | Manage all notifications: https://gitlab.com/-/profile/notifications | Help: https://gitlab.com/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.gnupg.org/pipermail/gnutls-devel/attachments/20260818/291ea623/attachment-0003.html>


More information about the Gnutls-devel mailing list