Re: [Boost-bugs] [Boost C++ Libraries] #6528: Potential vulnerability in programs recompiled for 64-bit platforms

Subject: Re: [Boost-bugs] [Boost C++ Libraries] #6528: Potential vulnerability in programs recompiled for 64-bit platforms
From: Boost C++ Libraries (noreply_at_[hidden])
Date: 2012-02-08 13:29:16

#6528: Potential vulnerability in programs recompiled for 64-bit platforms
-------------------------------------+--------------------------------------
  Reporter:  econometrics@…          |       Owner:  jsiek                          
      Type:  Bugs                    |      Status:  new                            
 Milestone:  To Be Determined        |   Component:  dynamic_bitset                 
   Version:  Boost 1.38.0            |    Severity:  Problem                        
Resolution:                          |    Keywords:  Vulnerability, 64-bit, overflow
-------------------------------------+--------------------------------------

Comment (by anonymous):

 Replying to [comment:3 Ulrich Eckhardt <ulrich.eckhardt@…>]:
 > {{{buffer_type m_bits}}} is private. If
 {{{BOOST_DYNAMIC_BITSET_PRIVATE}}} is defined as public to work around
 compiler bugs, it should still be treated as private. Further, the
 {{{block_type}}} isn't exposed in the interface either. In summary, valid
 code will not not touch {{{m_bits}}} or its elements

 P.S.: I find the possibility of accessing m_bits nice. Why must it be
 private?

-- 
Ticket URL: <https://svn.boost.org/trac/boost/ticket/6528#comment:5>
Boost C++ Libraries <http://www.boost.org/>
Boost provides free peer-reviewed portable C++ source libraries.