...
According to RUS-CERT Advisory 2002-08:02, the following C/C++ implementations of calloc() were defective:
- GNU libc 2.2.5
- dietlibc CVS implementations prior to 2002-08-05
- Microsoft Visual C++ versions 4.0 and 6.0 (including the C++ new allocator)HP-UX 11 implementations prior to 2004-01-14
- GNU C++ Compiler (GCC versions 2.95, 3.0, and 3.1.1)GNU Ada Compiler (GNAT versions 3.14p and 3.1.1)
- HP-UX 11 implementations prior to 2004-01-14
- dietlibc CVS implementations prior to 2002-08-05
- libgcrypt 1.1.10 (GNU Crypto Library)
...