From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: by sourceware.org (Postfix, from userid 48) id 033D1386F419; Thu, 14 Jan 2021 11:02:56 +0000 (GMT) DKIM-Filter: OpenDKIM Filter v2.11.0 sourceware.org 033D1386F419 From: "nsz at gcc dot gnu.org" To: glibc-bugs@sourceware.org Subject: [Bug dynamic-link/27181] New: __tunables_init can oom fail Date: Thu, 14 Jan 2021 11:02:56 +0000 X-Bugzilla-Reason: CC X-Bugzilla-Type: new X-Bugzilla-Watch-Reason: None X-Bugzilla-Product: glibc X-Bugzilla-Component: dynamic-link X-Bugzilla-Version: 2.32 X-Bugzilla-Keywords: X-Bugzilla-Severity: normal X-Bugzilla-Who: nsz at gcc dot gnu.org X-Bugzilla-Status: NEW X-Bugzilla-Resolution: X-Bugzilla-Priority: P2 X-Bugzilla-Assigned-To: unassigned at sourceware dot org X-Bugzilla-Target-Milestone: --- X-Bugzilla-Flags: X-Bugzilla-Changed-Fields: bug_id short_desc product version bug_status bug_severity priority component assigned_to reporter target_milestone Message-ID: Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable X-Bugzilla-URL: http://sourceware.org/bugzilla/ Auto-Submitted: auto-generated MIME-Version: 1.0 X-BeenThere: glibc-bugs@sourceware.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Glibc-bugs mailing list List-Unsubscribe: , List-Archive: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 14 Jan 2021 11:02:57 -0000 https://sourceware.org/bugzilla/show_bug.cgi?id=3D27181 Bug ID: 27181 Summary: __tunables_init can oom fail Product: glibc Version: 2.32 Status: NEW Severity: normal Priority: P2 Component: dynamic-link Assignee: unassigned at sourceware dot org Reporter: nsz at gcc dot gnu.org Target Milestone: --- __tunables_init happens very early (before libc ifunc resolvers are run). it should not unnecessarily introduce failures, but it allocates memory in tunables_strdup. this is only needed in setuid executables when the GLIBC_TUNABLES env var has to be sanitized, so there should be no failure mode in other cases. with static pie __tunables_init will happen before self relocation (after bug 27072 is fixed) so complex code like _dl_fatal_printf should not be used there otherwise it's hard to guarantee that there are no relocations. --=20 You are receiving this mail because: You are on the CC list for the bug.=