[Bug dynamic-link/29062] New: Memory leak in _dl_find_object_update if object is promoted to global scope

[Bug dynamic-link/29062] New: Memory leak in _dl_find_object_update if object is promoted to global scope

[fweimer at redhat dot com]

https://sourceware.org/bugzilla/show_bug.cgi?id=29062

            Bug ID: 29062
           Summary: Memory leak in _dl_find_object_update if object is
                    promoted to global scope
           Product: glibc
           Version: 2.35
            Status: NEW
          Severity: normal
          Priority: P2
         Component: dynamic-link
          Assignee: fweimer at redhat dot com
          Reporter: fweimer at redhat dot com
  Target Milestone: ---
             Flags: security-

The temporary array in _dl_find_object_update leaks if the count is 0. This
happens if an object that has already been loaded as an indirect dependency is
promoted to global scope.

-- 
You are receiving this mail because:
You are on the CC list for the bug.

[Bug dynamic-link/29062] Memory leak in _dl_find_object_update if object is promoted to global scope

[fweimer at redhat dot com]

https://sourceware.org/bugzilla/show_bug.cgi?id=29062

Florian Weimer <fweimer at redhat dot com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |ASSIGNED
                 CC|                            |fweimer at redhat dot com

-- 
You are receiving this mail because:
You are on the CC list for the bug.

[Bug dynamic-link/29062] Memory leak in _dl_find_object_update if object is promoted to global scope

[fweimer at redhat dot com]

https://sourceware.org/bugzilla/show_bug.cgi?id=29062

--- Comment #1 from Florian Weimer <fweimer at redhat dot com> ---
Patch posted:
https://sourceware.org/pipermail/libc-alpha/2022-April/137747.html

-- 
You are receiving this mail because:
You are on the CC list for the bug.

[Bug dynamic-link/29062] Memory leak in _dl_find_object_update if object is promoted to global scope

[fweimer at redhat dot com]

https://sourceware.org/bugzilla/show_bug.cgi?id=29062

Florian Weimer <fweimer at redhat dot com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
   Target Milestone|---                         |2.36
             Status|ASSIGNED                    |RESOLVED
         Resolution|---                         |FIXED

--- Comment #2 from Florian Weimer <fweimer at redhat dot com> ---
Fixed for 2.36 via:

commit 4a41fc3cd9cea9223ea4f13f9c766a1e149a0ccc
Author: Florian Weimer <fweimer@redhat.com>
Date:   Wed Apr 13 14:18:28 2022 +0200

    elf: Fix memory leak in _dl_find_object_update (bug 29062)

    The count can be zero if an object has already been loaded as
    an indirect dependency (so that l_searchlist.r_list in its link
    map is still NULL) is promoted to global scope via RTLD_GLOBAL.

    Fixes commit 5d28a8962dc ("elf: Add _dl_find_object function").

I will backport to 2.35

-- 
You are receiving this mail because:
You are on the CC list for the bug.