[Bug libc/23972] New: __old_getdents64 uses wrong d_off value on overflow

[fweimer at redhat dot com]

https://sourceware.org/bugzilla/show_bug.cgi?id=23972

            Bug ID: 23972
           Summary: __old_getdents64 uses wrong d_off value on overflow
           Product: glibc
           Version: unspecified
            Status: NEW
          Severity: normal
          Priority: P2
         Component: libc
          Assignee: unassigned at sourceware dot org
          Reporter: fweimer at redhat dot com
                CC: drepper.fsp at gmail dot com
  Target Milestone: ---
             Flags: security-

d_off is the offset of the directory next entry, not the offset of the current
entry.  As a result, if handle_overflow does not report an error immediately,
it will jump over the problematic entry.

Found through source code inspection.  I do not have a test case.

-- 
You are receiving this mail because:
You are on the CC list for the bug.