[Bug network/23927] Linux if_nametoindex() does not close descriptor (CVE-2018-19591)

["cvs-commit at gcc dot gnu.org" <sourceware-bugzilla at sourceware dot org>]

https://sourceware.org/bugzilla/show_bug.cgi?id=23927

--- Comment #10 from cvs-commit at gcc dot gnu.org <cvs-commit at gcc dot gnu.org> ---
This is an automated email from the git hooks/post-receive script. It was
generated because a ref change was pushed to the repository containing
the project "GNU C Library master sources".

The branch, release/2.27/master has been updated
       via  f1e211096b612c9e6c6d3fb6cc0d773ebfd797af (commit)
       via  4e9f34e54f4dc61e8ad7d8f82e64c271912965e5 (commit)
       via  e75481a7a7a5b4b5433f7e157fc103866aeea0f4 (commit)
       via  0f79dc0be3a5683cf266ef0756fe7feceb4727c9 (commit)
       via  6b2dd53aa0082f45749b6baa8f229af9c220233c (commit)
      from  50477165b93538654f2d03a598e9ede45e7f5ac3 (commit)

Those revisions listed above that are new to this repository have
not appeared on any other notification email; so we list those
revisions in full, below.

- Log -----------------------------------------------------------------
https://sourceware.org/git/gitweb.cgi?p=glibc.git;h=f1e211096b612c9e6c6d3fb6cc0d773ebfd797af

commit f1e211096b612c9e6c6d3fb6cc0d773ebfd797af
Author: Florian Weimer <fweimer@redhat.com>
Date:   Thu Dec 6 15:39:50 2018 +0100

    inet/tst-if_index-long: New test case for CVE-2018-19591 [BZ #23927]

    (cherry picked from commit 899478c2bfa00c5df8d8bedb52effbb065700278)

https://sourceware.org/git/gitweb.cgi?p=glibc.git;h=4e9f34e54f4dc61e8ad7d8f82e64c271912965e5

commit 4e9f34e54f4dc61e8ad7d8f82e64c271912965e5
Author: Florian Weimer <fweimer@redhat.com>
Date:   Thu Dec 6 15:39:42 2018 +0100

    support: Implement <support/descriptors.h> to track file descriptors

    (cherry picked from commit f255336a9301619519045548acb2e1027065a837)

https://sourceware.org/git/gitweb.cgi?p=glibc.git;h=e75481a7a7a5b4b5433f7e157fc103866aeea0f4

commit e75481a7a7a5b4b5433f7e157fc103866aeea0f4
Author: Florian Weimer <fweimer@redhat.com>
Date:   Sat Dec 1 21:43:36 2018 +0100

    support: Close original descriptors in support_capture_subprocess

    (cherry picked from commit 02cd5c1a8d033d7f91fea12a66bb44d1bbf85f76)

https://sourceware.org/git/gitweb.cgi?p=glibc.git;h=0f79dc0be3a5683cf266ef0756fe7feceb4727c9

commit 0f79dc0be3a5683cf266ef0756fe7feceb4727c9
Author: Florian Weimer <fweimer@redhat.com>
Date:   Wed Nov 28 07:00:48 2018 +0100

    support_quote_string: Do not use str parameter name

    This avoids a build failure if this identifier is used as a macro
    in a test.

    (cherry picked from commit 47d8d9a2172f827a8dde7695f415aa6f78a82d0e)

https://sourceware.org/git/gitweb.cgi?p=glibc.git;h=6b2dd53aa0082f45749b6baa8f229af9c220233c

commit 6b2dd53aa0082f45749b6baa8f229af9c220233c
Author: Florian Weimer <fweimer@redhat.com>
Date:   Tue Nov 27 21:35:56 2018 +0100

    support: Implement support_quote_string

    Reviewed-by: Jonathan Nieder <jrnieder@gmail.com>
    (cherry picked from commit c74a91deaa5de416237c02bbb3e41bda76ca4c7b)

-----------------------------------------------------------------------

Summary of changes:
 ChangeLog                            |   38 +++++
 inet/Makefile                        |    2 +-
 inet/tst-if_index-long.c             |   61 ++++++++
 support/Makefile                     |    4 +
 support/check.h                      |    4 +
 support/descriptors.h                |   47 ++++++
 support/support.h                    |    5 +
 support/support_capture_subprocess.c |    6 +
 support/support_descriptors.c        |  274 ++++++++++++++++++++++++++++++++++
 support/support_quote_string.c       |   26 ++++
 support/support_record_failure.c     |    8 +
 support/tst-support_descriptors.c    |  198 ++++++++++++++++++++++++
 support/tst-support_quote_string.c   |   60 ++++++++
 13 files changed, 732 insertions(+), 1 deletions(-)
 create mode 100644 inet/tst-if_index-long.c
 create mode 100644 support/descriptors.h
 create mode 100644 support/support_descriptors.c
 create mode 100644 support/support_quote_string.c
 create mode 100644 support/tst-support_descriptors.c
 create mode 100644 support/tst-support_quote_string.c

-- 
You are receiving this mail because:
You are on the CC list for the bug.