This is the mail archive of the libc-alpha@sourceware.org mailing list for the glibc project.

Index Nav: [Date Index] [Subject Index] [Author Index] [Thread Index]
Message Nav: [Date Prev] [Date Next] [Thread Prev] [Thread Next]
Other format: [Raw text]

Re: [PATCH] rtld: Reject overly long LD_AUDIT path elements

On 06/26/2017 01:39 PM, Andreas Schwab wrote:
> On Jun 26 2017, Florian Weimer <fweimer@redhat.com> wrote:
> 
>> On 06/26/2017 01:02 PM, Andreas Schwab wrote:
>>> On Jun 26 2017, Florian Weimer <fweimer@redhat.com> wrote:
>>>
>>>> +/* Process the audit modules in audit_list and audit_list_string.  */
>>>> +void
>>>> +handle_audit_modules (void)
>>>> +{
>>>> +  char fname[SECURE_PATH_LIMIT];
>>>> +  struct audit_ifaces *last_audit = NULL;
>>>> +
>>>> +  if (audit_list_string != NULL)
>>>
>>> Why do you need that?
>>
>> Which part?  The separate processing for LD_AUDIT and the --audit
>> command line arguments?

The goal is to prevent massaging the heap through LD_AUDIT variable
contents.  So it's purely hardening.

Thanks,
Florian
Index Nav: [Date Index] [Subject Index] [Author Index] [Thread Index]
Message Nav: [Date Prev] [Date Next] [Thread Prev] [Thread Next]