This is the mail archive of the
glibc-bugs@sourceware.org
mailing list for the glibc project.
[Bug libc/11884] Unbounded alloca() in node parameter of getaddrinfo()
- From: "fweimer at redhat dot com" <sourceware-bugzilla at sourceware dot org>
- To: glibc-bugs at sourceware dot org
- Date: Mon, 30 Jun 2014 17:23:51 +0000
- Subject: [Bug libc/11884] Unbounded alloca() in node parameter of getaddrinfo()
- Auto-submitted: auto-generated
- References: <bug-11884-131 at http dot sourceware dot org/bugzilla/>
https://sourceware.org/bugzilla/show_bug.cgi?id=11884
Florian Weimer <fweimer at redhat dot com> changed:
What |Removed |Added
----------------------------------------------------------------------------
CC| |fweimer at redhat dot com
Flags| |security+
--- Comment #10 from Florian Weimer <fweimer at redhat dot com> ---
(In reply to Kees Cook from comment #5)
> Looks like this issue may be getting mitigated in other ways already:
>
> $ ./getaddrinfo 100
> getaddrinfo: Connection timed out
> $ ./getaddrinfo 1000
> getaddrinfo: Invalid argument
You would have to use a much larger argument, probably something around this:
$ ./getaddrinfo 16000000
I haven't got an unpatched glibc 2.7 around to test.
This may have been fixed by 34a9094f49241ebb72084c536cf468fd51ebe3ec, which
went into glibc 2.14. It has been backported by some downstream distributions,
e.g. <https://bugzilla.redhat.com/show_bug.cgi?id=797096>.
--
You are receiving this mail because:
You are on the CC list for the bug.