Re: [Boost-bugs] [Boost C++ Libraries] #6528: Potential vulnerability in programs recompiled for 64-bit platforms

Subject: Re: [Boost-bugs] [Boost C++ Libraries] #6528: Potential vulnerability in programs recompiled for 64-bit platforms
From: Boost C++ Libraries (noreply_at_[hidden])
Date: 2012-02-09 08:13:54

#6528: Potential vulnerability in programs recompiled for 64-bit platforms
-------------------------------------+--------------------------------------
  Reporter:  econometrics@…          |       Owner:  jsiek                          
      Type:  Bugs                    |      Status:  new                            
 Milestone:  To Be Determined        |   Component:  dynamic_bitset                 
   Version:  Boost 1.38.0            |    Severity:  Problem                        
Resolution:                          |    Keywords:  Vulnerability, 64-bit, overflow
-------------------------------------+--------------------------------------

Comment (by Ulrich Eckhardt <ulrich.eckhardt@…>):

 It is private exactly so that people don't mess with it and so that
 dynamic_bitset's class invariants are guaranteed. This is the 101 of
 encapsulation.

 BTW: What you probably want is a look at {{{boost/stdint.hpp}}}, in
 particular {{{uint32_t}}} there, which is guaranteed to be 32 bits on any
 platform. Using unsigned int and and relying on its size being 32 bits is
 simply not guaranteed anywhere. You also make your code more self-
 commenting.

-- 
Ticket URL: <https://svn.boost.org/trac/boost/ticket/6528#comment:6>
Boost C++ Libraries <http://www.boost.org/>
Boost provides free peer-reviewed portable C++ source libraries.