Re : bug in gawk-3.1.0

[Olatunji Oluwabukunmi Ruwase]

Hi,
 i do apologize if this happens to be an old and fixed bug, but i searched
in vain for a list of reported/fixed bugs for gawk.
 anyway i m working on improving the performance of Richard Jones' bounds
checking extension to gcc by reducing the slowdown it imposes on code
compiled with it.
 so while testing the effectiveness of my code on known buffer
overflow bugs, i decided to work on gawk-3.0.1 and
came up on this bug in random.c

random.c:178: static long randtbl[DEG_3 + 1] = {

random.c:230: static long *end_ptr = &randtbl[DEG_3 + 1];

line 230 is clearly an out of range array expression.

interestingly Richard Jone's extension flagged this at compile time.

could this be responsible for the buffer overflow vunerability which is
associated with using the -f option

thanks


tunji