Eliminate 'passing tainted var maps_buf to tainted sink' code defect FP

* os_dep.c [NEED_PROC_MAPS && LINT2] (GC_get_maps): Clear maps_buf
content (if maps_buf is non-null) before passing to
GC_scratch_recycle_no_gww().

1 files changed, 5 insertions, 0 deletions

diff --git a/os_dep.c b/os_dep.c
index 61d988ae..e4fcface 100644
--- a/os_dep.c
+++ b/os_dep.c
@@ -199,6 +199,11 @@ GC_INNER char * GC_get_maps(void)
             int f;
 
             while (maps_size >= maps_buf_sz) {
+#             ifdef LINT2
+                /* Workaround passing tainted maps_buf to a tainted sink. */
+                if (maps_buf != NULL)
+                  BZERO(maps_buf, maps_buf_sz);
+#             endif
               GC_scratch_recycle_no_gww(maps_buf, maps_buf_sz);
               /* Grow only by powers of 2, since we leak "too small" buffers.*/
               while (maps_size >= maps_buf_sz) maps_buf_sz *= 2;