Bug 29522 - Missing invalidation of the link map cache in __cxa_thread_atexit_impl
Summary: Missing invalidation of the link map cache in __cxa_thread_atexit_impl
Status: NEW
Alias: None
Product: glibc
Classification: Unclassified
Component: dynamic-link (show other bugs)
Version: 2.37
: P2 normal
Target Milestone: ---
Assignee: Not yet assigned to anyone
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2022-08-25 09:11 UTC by Florian Weimer
Modified: 2022-08-25 09:11 UTC (History)
0 users

See Also:
Host:
Target:
Build:
Last reconfirmed:
fweimer: security-

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Florian Weimer 2022-08-25 09:11:14 UTC 
__cxa_thread_atexit_impl uses the TLS variables dso_symbol_cache and lm_cache, but the cache is not invalidated in dlclose. This means there is an ABA bug, and we could use the wrong link map for a stale dso_symbol value.