[Bug libc/22679] getcwd(3) can succeed without returning an absolute path

ldv at sourceware dot org sourceware-bugzilla@sourceware.org
Thu Jan 11 21:55:00 GMT 2018


https://sourceware.org/bugzilla/show_bug.cgi?id=22679

Dmitry V. Levin <ldv at sourceware dot org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
              Alias|                            |CVE-2018-1000001
              Flags|                            |security+

--- Comment #1 from Dmitry V. Levin <ldv at sourceware dot org> ---
This is also a security issue because a non-absolute path returned by getcwd(3)
causes a buffer underflow in realpath(3).

-- 
You are receiving this mail because:
You are on the CC list for the bug.


More information about the Glibc-bugs mailing list