glibc-source: An exploitable signed comparison vulnerability exists in the ARMv7 memcpy()implementation of GNU glibc 2.30.9000

An exploitable signed comparison vulnerability exists in the ARMv7 memcpy()implementation of GNU glibc 2.30.9000. Calling memcpy() (on ARMv7 targetsthat utilize the GNU glibc implementation) with a negative value for the'num' parameter results in a signed comparison vulnerability. If anattacker underflows the 'num' parameter to memcpy(), this vulnerabilitycould lead to undefined behavior such as writing to out-of-bounds memoryand potentially remote code execution. Furthermore, this memcpy()implementation allows for program execution to continue in scenarios wherea segmentation fault or crash should have occurred. The dangers occur inthat subsequent execution and iterations of this code will be executed withthis corrupted data.

Where it's fixed