public inbox for glibc-bugs@sourceware.org
help / color / mirror / Atom feed
* [Bug dynamic-link/14055] New: _dl_show_auxv may cause out-of-bounds access and crash
@ 2012-05-02 21:25 ppluzhnikov at google dot com
  2012-05-02 21:38 ` [Bug dynamic-link/14055] " ppluzhnikov at google dot com
  2014-06-25 11:07 ` fweimer at redhat dot com
  0 siblings, 2 replies; 3+ messages in thread
From: ppluzhnikov at google dot com @ 2012-05-02 21:25 UTC (permalink / raw)
  To: glibc-bugs

http://sourceware.org/bugzilla/show_bug.cgi?id=14055

             Bug #: 14055
           Summary: _dl_show_auxv may cause out-of-bounds access and crash
           Product: glibc
           Version: unspecified
            Status: NEW
          Severity: normal
          Priority: P2
         Component: dynamic-link
        AssignedTo: unassigned@sourceware.org
        ReportedBy: ppluzhnikov@google.com
    Classification: Unclassified


Created attachment 6387
  --> http://sourceware.org/bugzilla/attachment.cgi?id=6387
proposed patch

Original report:
http://sourceware.org/ml/libc-alpha/2012-04/msg01201.html

In _dl_show_auxv(), when handling unknown a_type values, auxvars[] could
be accessed out of bounds and cause a crash.

Attached patch fixes that.

Tested on Linux/x86_64, no regressions.

Google ref: b/6412609

Patch has been approved:
http://sourceware.org/ml/libc-alpha/2012-05/msg00055.html
and will be committed shortly.

-- 
Configure bugmail: http://sourceware.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.


^ permalink raw reply	[flat|nested] 3+ messages in thread

* [Bug dynamic-link/14055] _dl_show_auxv may cause out-of-bounds access and crash
  2012-05-02 21:25 [Bug dynamic-link/14055] New: _dl_show_auxv may cause out-of-bounds access and crash ppluzhnikov at google dot com
@ 2012-05-02 21:38 ` ppluzhnikov at google dot com
  2014-06-25 11:07 ` fweimer at redhat dot com
  1 sibling, 0 replies; 3+ messages in thread
From: ppluzhnikov at google dot com @ 2012-05-02 21:38 UTC (permalink / raw)
  To: glibc-bugs

http://sourceware.org/bugzilla/show_bug.cgi?id=14055

Paul Pluzhnikov <ppluzhnikov at google dot com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |RESOLVED
         Resolution|                            |FIXED

--- Comment #1 from Paul Pluzhnikov <ppluzhnikov at google dot com> 2012-05-02 21:37:47 UTC ---
Fix committed:
http://sourceware.org/git/?p=glibc.git;a=commit;h=171a70b4c0173533f6f803ec6bc8c2ed910cc468

-- 
Configure bugmail: http://sourceware.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.


^ permalink raw reply	[flat|nested] 3+ messages in thread

* [Bug dynamic-link/14055] _dl_show_auxv may cause out-of-bounds access and crash
  2012-05-02 21:25 [Bug dynamic-link/14055] New: _dl_show_auxv may cause out-of-bounds access and crash ppluzhnikov at google dot com
  2012-05-02 21:38 ` [Bug dynamic-link/14055] " ppluzhnikov at google dot com
@ 2014-06-25 11:07 ` fweimer at redhat dot com
  1 sibling, 0 replies; 3+ messages in thread
From: fweimer at redhat dot com @ 2014-06-25 11:07 UTC (permalink / raw)
  To: glibc-bugs

https://sourceware.org/bugzilla/show_bug.cgi?id=14055

Florian Weimer <fweimer at redhat dot com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
              Flags|                            |security-

-- 
You are receiving this mail because:
You are on the CC list for the bug.


^ permalink raw reply	[flat|nested] 3+ messages in thread

end of thread, other threads:[~2014-06-25 11:07 UTC | newest]

Thread overview: 3+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2012-05-02 21:25 [Bug dynamic-link/14055] New: _dl_show_auxv may cause out-of-bounds access and crash ppluzhnikov at google dot com
2012-05-02 21:38 ` [Bug dynamic-link/14055] " ppluzhnikov at google dot com
2014-06-25 11:07 ` fweimer at redhat dot com

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for read-only IMAP folder(s) and NNTP newsgroup(s).