This is the mail archive of the
glibc-cvs@sourceware.org
mailing list for the glibc project.
GNU C Library master sources branch ibm/2.20/master updated. glibc-2.20-80-g2feb372
- From: gftg at sourceware dot org
- To: glibc-cvs at sourceware dot org
- Date: 25 May 2016 18:00:29 -0000
- Subject: GNU C Library master sources branch ibm/2.20/master updated. glibc-2.20-80-g2feb372
This is an automated email from the git hooks/post-receive script. It was
generated because a ref change was pushed to the repository containing
the project "GNU C Library master sources".
The branch, ibm/2.20/master has been updated
via 2feb372c585eb77141adbff24d4958e5a5e6678a (commit)
via 916ef0f69613613e11123657bff127bd26104630 (commit)
via afc4daae0411d10e5d64646d5bafb05075e16151 (commit)
via c5bbc09ccc07fb9b61b7f0f5bf531d7c8c164469 (commit)
via 902072efdbb724cea105f60842c4862070d7862e (commit)
via 03e3ee42d64388243aed95b7702007640dcdd5b5 (commit)
via 3822125d1c520d5bb5e33cd9254a902d52d4eb19 (commit)
via 75cf90eb20d98270ea3903baefb75647ae61fd3f (commit)
via 1029487ab3b2ef65ec9364cb15c44ee9c571224f (commit)
via edbab2450a084a275d418fba871a8c7b48001a71 (commit)
via ee35f1cb547e21538b4c6ef0ed7515635552baa6 (commit)
via 57d1664a03c298147ee6da9e0d513117fe750427 (commit)
via 4cf2b4e80a41f96f1b867f253547241871827ef1 (commit)
via 4b7ba5b8c4722d610862744c619bcaa5ad655385 (commit)
via 3058f7487e5b98f7af0219f77464294000c84bf0 (commit)
via 66cdb5b20df45c4eb28ab27ebcfb67ef023338e3 (commit)
via 7af8c37714ece3f02716f17e59631ada0c0ee0d9 (commit)
via adba20cf74bc6ea3910afe57d40ed755c92c2ddb (commit)
from c69c361ca6bf95f8c665884ee863168a321d472a (commit)
Those revisions listed above that are new to this repository have
not appeared on any other notification email; so we list those
revisions in full, below.
- Log -----------------------------------------------------------------
http://sourceware.org/git/gitweb.cgi?p=glibc.git;a=commitdiff;h=2feb372c585eb77141adbff24d4958e5a5e6678a
commit 2feb372c585eb77141adbff24d4958e5a5e6678a
Merge: c69c361 916ef0f
Author: Gabriel F. T. Gomes <gftg@linux.vnet.ibm.com>
Date: Wed May 25 10:04:06 2016 -0300
Merge release/2.20/master into ibm/2.20/master
Conflicts:
NEWS
diff --cc NEWS
index 52d14e3,dc8679f..6181729
--- a/NEWS
+++ b/NEWS
@@@ -10,7 -10,21 +10,21 @@@ Version 2.20.
* The following bugs are resolved with this release:
16009, 16617, 16618, 17266, 17269, 17370, 17371, 17460, 17485, 17555,
- 17625, 17630, 17801, 18007, 18032, 18287, 18665, 18694, 18928, 19018.
- 17625, 17630, 17801, 17905, 18032, 18080, 18240, 18508, 18665, 18694,
- 18928, 19018, 19682.
++ 17625, 17630, 17801, 17905, 18007, 18032, 18080, 18240, 18287, 18508,
++ 18665, 18694, 18928, 19018, 19682.
+
+ * The glob function suffered from a stack-based buffer overflow when it was
+ called with the GLOB_ALTDIRFUNC flag and encountered a long file name.
+ Reported by Alexander Cherepanov. (CVE-2016-1234)
+
+ * An unnecessary stack copy in _nss_dns_getnetbyname_r was removed. It
+ could result in a stack overflow when getnetbyname was called with an
+ overly long name. (CVE-2016-3075)
+
+ * Previously, getaddrinfo copied large amounts of address data to the stack,
+ even after the fix for CVE-2013-4458 has been applied, potentially
+ resulting in a stack overflow. getaddrinfo now uses a heap allocation
+ instead. Reported by Michael Petlan. (CVE-2016-3706)
* A stack-based buffer overflow was found in libresolv when invoked from
libnss_dns, allowing specially crafted DNS responses to seize control
-----------------------------------------------------------------------
Summary of changes:
ChangeLog | 179 ++++++++++++++
NEWS | 16 ++-
catgets/Makefile | 9 +-
catgets/catgets.c | 19 +-
catgets/open_catalog.c | 23 ++-
catgets/tst-catgets.c | 31 +++
config.h.in | 3 +
manual/examples/mkdirent.c | 42 ++++
manual/pattern.texi | 39 +++-
misc/Makefile | 3 +-
misc/bug18240.c | 97 ++++++++
misc/hsearch_r.c | 30 ++-
posix/bug-glob2.c | 16 ++-
posix/glob.c | 243 ++++++++++----------
posix/tst-gnuglob.c | 2 +-
resolv/nss_dns/dns-network.c | 5 +-
stdlib/Makefile | 12 +-
stdlib/tst-makecontext.c | 41 ++++-
stdlib/tst-setcontext2.c | 230 ++++++++++++++++++
sysdeps/posix/getaddrinfo.c | 130 ++++++-----
sysdeps/s390/bits/link.h | 29 +++
sysdeps/s390/configure | 41 ++++
sysdeps/s390/configure.ac | 29 +++
sysdeps/s390/dl-procinfo.c | 8 +-
sysdeps/s390/dl-procinfo.h | 5 +-
sysdeps/s390/s390-32/dl-machine.h | 27 ++-
sysdeps/s390/s390-32/dl-trampoline.S | 134 +----------
sysdeps/s390/s390-32/dl-trampoline.h | 231 +++++++++++++++++++
sysdeps/s390/s390-64/dl-machine.h | 27 ++-
sysdeps/s390/s390-64/dl-trampoline.S | 130 +----------
sysdeps/s390/s390-64/dl-trampoline.h | 225 ++++++++++++++++++
sysdeps/unix/sysv/linux/i386/glob64.c | 22 ++
sysdeps/unix/sysv/linux/s390/bits/hwcap.h | 1 +
.../sysv/linux/s390/s390-32/__makecontext_ret.S | 8 +
sysdeps/unix/sysv/linux/s390/s390-32/setcontext.S | 2 +-
sysdeps/unix/sysv/linux/s390/s390-32/swapcontext.S | 16 +-
.../sysv/linux/s390/s390-64/__makecontext_ret.S | 8 +
sysdeps/unix/sysv/linux/s390/s390-64/setcontext.S | 2 +-
sysdeps/unix/sysv/linux/s390/s390-64/swapcontext.S | 16 +-
sysdeps/unix/sysv/linux/s390/s390-64/syscalls.list | 19 --
sysdeps/x86_64/configure | 4 +-
sysdeps/x86_64/configure.ac | 4 +-
42 files changed, 1633 insertions(+), 525 deletions(-)
create mode 100644 manual/examples/mkdirent.c
create mode 100644 misc/bug18240.c
create mode 100644 stdlib/tst-setcontext2.c
create mode 100644 sysdeps/s390/s390-32/dl-trampoline.h
create mode 100644 sysdeps/s390/s390-64/dl-trampoline.h
hooks/post-receive
--
GNU C Library master sources