public inbox for glibc-bugs@sourceware.org
help / color / mirror / Atom feed
* [Bug dynamic-link/14839] New: Access behind terminating nullbyte of the environment?
@ 2012-11-13 22:40 jannhorn at googlemail dot com
2012-11-13 22:49 ` [Bug dynamic-link/14839] " jannhorn at googlemail dot com
2014-06-14 11:07 ` fweimer at redhat dot com
0 siblings, 2 replies; 3+ messages in thread
From: jannhorn at googlemail dot com @ 2012-11-13 22:40 UTC (permalink / raw)
To: glibc-bugs
http://sourceware.org/bugzilla/show_bug.cgi?id=14839
Bug #: 14839
Summary: Access behind terminating nullbyte of the environment?
Product: glibc
Version: 2.13
Status: NEW
Severity: minor
Priority: P2
Component: dynamic-link
AssignedTo: unassigned@sourceware.org
ReportedBy: jannhorn@googlemail.com
Classification: Unclassified
>From rtld.c:
case 10:
/* Mask for the important hardware capabilities. */
if (memcmp (envline, "HWCAP_MASK", 10) == 0)
GLRO(dl_hwcap_mask) = __strtoul_internal (&envline[11], NULL,
0, 0);
As far as I can see, there is no check that makes sure that the tenth byte
isn't already the terminating nullbyte.
--
Configure bugmail: http://sourceware.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.
^ permalink raw reply [flat|nested] 3+ messages in thread
* [Bug dynamic-link/14839] Access behind terminating nullbyte of the environment?
2012-11-13 22:40 [Bug dynamic-link/14839] New: Access behind terminating nullbyte of the environment? jannhorn at googlemail dot com
@ 2012-11-13 22:49 ` jannhorn at googlemail dot com
2014-06-14 11:07 ` fweimer at redhat dot com
1 sibling, 0 replies; 3+ messages in thread
From: jannhorn at googlemail dot com @ 2012-11-13 22:49 UTC (permalink / raw)
To: glibc-bugs
http://sourceware.org/bugzilla/show_bug.cgi?id=14839
Jann Horn <jannhorn at googlemail dot com> changed:
What |Removed |Added
----------------------------------------------------------------------------
Status|NEW |RESOLVED
Resolution| |INVALID
--- Comment #1 from Jann Horn <jannhorn at googlemail dot com> 2012-11-13 22:48:43 UTC ---
Ah, didn't see the `if (envline[len] != '=')`. Sorry.
--
Configure bugmail: http://sourceware.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.
^ permalink raw reply [flat|nested] 3+ messages in thread
* [Bug dynamic-link/14839] Access behind terminating nullbyte of the environment?
2012-11-13 22:40 [Bug dynamic-link/14839] New: Access behind terminating nullbyte of the environment? jannhorn at googlemail dot com
2012-11-13 22:49 ` [Bug dynamic-link/14839] " jannhorn at googlemail dot com
@ 2014-06-14 11:07 ` fweimer at redhat dot com
1 sibling, 0 replies; 3+ messages in thread
From: fweimer at redhat dot com @ 2014-06-14 11:07 UTC (permalink / raw)
To: glibc-bugs
https://sourceware.org/bugzilla/show_bug.cgi?id=14839
Florian Weimer <fweimer at redhat dot com> changed:
What |Removed |Added
----------------------------------------------------------------------------
Flags| |security-
--
You are receiving this mail because:
You are on the CC list for the bug.
^ permalink raw reply [flat|nested] 3+ messages in thread
end of thread, other threads:[~2014-06-14 11:07 UTC | newest]
Thread overview: 3+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2012-11-13 22:40 [Bug dynamic-link/14839] New: Access behind terminating nullbyte of the environment? jannhorn at googlemail dot com
2012-11-13 22:49 ` [Bug dynamic-link/14839] " jannhorn at googlemail dot com
2014-06-14 11:07 ` fweimer at redhat dot com
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for read-only IMAP folder(s) and NNTP newsgroup(s).