In MD5_native::transform disable sanitizer unsigned integer overflow checks

Wrap-around is intentional and generates false positives

In MD5_native::transform disable sanitizer unsigned integer overflow checks
Wrap-around is intentional and generates false positives
m-holger
1 parent b3ab5cd2
Showing 1 changed file with 5 additions and 0 deletions
libqpdf/MD5_native.cc
@@ -193,7 +193,12 @@ MD5_native::digest(Digest result)
 }
 // MD5 basic transformation. Transforms state based on block.
+//
+// NB The algorithm intentionally relies on unsigned integer wrap-around
 void MD5_native::transform(uint32_t state[4], unsigned char block[64])
+#if defined(__clang__)
+__attribute__((no_sanitize("unsigned-integer-overflow")))
+#endif
 {
     uint32_t a = state[0], b = state[1], c = state[2], d = state[3], x[16];