[Libguestfs] [PATCH libnbd] configure: Ban use of Variable Length Arrays (VLAs).

Richard W.M. Jones rjones at redhat.com
Thu Sep 5 11:38:55 UTC 2019


Since we don't know much about the calling environment, which might
have a limited stack, might be taking input from untrusted sources, or
we might not have other stack protections enabled, it's best to be
cautious about using unbounded stack allocations.

We're not in fact using them in libnbd, but this change prevents them
from being added in future.
---
 configure.ac | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/configure.ac b/configure.ac
index 6ea3197..0332d77 100644
--- a/configure.ac
+++ b/configure.ac
@@ -66,7 +66,7 @@ AC_ARG_ENABLE([gcc-warnings],
       [gcc_warnings=no]
 )
 if test "x$gcc_warnings" = "xyes"; then
-    WARNINGS_CFLAGS="-Wall -Werror"
+    WARNINGS_CFLAGS="-Wall -Wvla -Werror"
     AC_SUBST([WARNINGS_CFLAGS])
 fi
 
-- 
2.23.0




More information about the Libguestfs mailing list