[Bug nis/20987] NIS+ unbounded stack allocations

joseph at codesourcery dot com sourceware-bugzilla@sourceware.org
Wed Jan 25 16:14:00 GMT 2017


https://sourceware.org/bugzilla/show_bug.cgi?id=20987

--- Comment #3 from joseph at codesourcery dot com <joseph at codesourcery dot com> ---
Are you confident that these stack allocations can only be triggered by 
(trusted) data from the network, not by e.g. a lookup of a crafted long 
user name (something it's plausible could be triggered across a trust 
boundary)?

-- 
You are receiving this mail because:
You are on the CC list for the bug.


More information about the Glibc-bugs mailing list