diff options
| author | Paul Pluzhnikov <ppluzhnikov@google.com> | 2018-05-08 18:12:41 -0700 |
|---|---|---|
| committer | Paul Pluzhnikov <ppluzhnikov@google.com> | 2018-05-08 18:12:41 -0700 |
| commit | 5460617d1567657621107d895ee2dd83bc1f88f2 (patch) | |
| tree | 478c1a918b575f667e34721dd6b1232b59b52554 /ChangeLog | |
| parent | aaee3cd88ed58f332f261021d78d071db6265e85 (diff) | |
| download | glibc-5460617d1567657621107d895ee2dd83bc1f88f2.tar glibc-5460617d1567657621107d895ee2dd83bc1f88f2.tar.gz glibc-5460617d1567657621107d895ee2dd83bc1f88f2.tar.bz2 glibc-5460617d1567657621107d895ee2dd83bc1f88f2.zip | |
Fix BZ 22786: integer addition overflow may cause stack buffer overflow
when realpath() input length is close to SSIZE_MAX.
2018-05-09 Paul Pluzhnikov <ppluzhnikov@google.com>
[BZ #22786]
* stdlib/canonicalize.c (__realpath): Fix overflow in path length
computation.
* stdlib/Makefile (test-bz22786): New test.
* stdlib/test-bz22786.c: New test.
Diffstat (limited to 'ChangeLog')
| -rw-r--r-- | ChangeLog | 8 |
1 files changed, 8 insertions, 0 deletions
@@ -1,3 +1,11 @@ +2018-05-09 Paul Pluzhnikov <ppluzhnikov@google.com> + + [BZ #22786] + * stdlib/canonicalize.c (__realpath): Fix overflow in path length + computation. + * stdlib/Makefile (test-bz22786): New test. + * stdlib/test-bz22786.c: New test. + 2018-05-09 Joseph Myers <joseph@codesourcery.com> * include/math-narrow-eval.h: New file. Contents moved from .... |