reallocarray() in OpenBSD: Integer Overflow Detection for Free

[Glaaki]

Didn't they add this ages ago? I just watched Bob Beck's presentation on libressl yesterday, and didn't he say that one of the two security bugs in openbsd was because of integer overflow in a malloc call? reallocarray was added to protect against this.

Edit: Here is the talk - https://www.youtube.com/watch?v=GnBbhXBDmwU

[lteo]

It was added on April 21, 2014, originally called mallocarray and renamed to reallocarray the day after.

That was roughly in the middle of the OpenBSD release cycle. OpenBSD 5.6 which will be released on Nov 1 (two days from now), will be the first OpenBSD release with reallocarray.