[Bug nss/24059] nss_files: get_next_alias calls fgets_unlocked without checking for NULL.
cvs-commit at gcc dot gnu.org
sourceware-bugzilla@sourceware.org
Thu Jan 31 18:01:00 GMT 2019
https://sourceware.org/bugzilla/show_bug.cgi?id=24059
--- Comment #4 from cvs-commit at gcc dot gnu.org <cvs-commit at gcc dot gnu.org> ---
This is an automated email from the git hooks/post-receive script. It was
generated because a ref change was pushed to the repository containing
the project "GNU C Library master sources".
The branch, master has been updated
via 2bac7daa58da1a313bd452369b0508b31e146637 (commit)
from de44ab67aa4eec369deea828733567c35a0611c0 (commit)
Those revisions listed above that are new to this repository have
not appeared on any other notification email; so we list those
revisions in full, below.
- Log -----------------------------------------------------------------
https://sourceware.org/git/gitweb.cgi?p=glibc.git;h=2bac7daa58da1a313bd452369b0508b31e146637
commit 2bac7daa58da1a313bd452369b0508b31e146637
Author: Florian Weimer <fweimer@redhat.com>
Date: Thu Jan 31 18:49:58 2019 +0100
nss_files: Fix /etc/aliases null pointer dereference [BZ #24059]
If /etc/aliases ends with a continuation line (a line that starts
with whitespace) which does not have a trailing newline character,
the file parser would crash due to a null pointer dereference.
Reviewed-by: Carlos O'Donell <carlos@redhat.com>
-----------------------------------------------------------------------
Summary of changes:
ChangeLog | 16 ++++++++
nss/Makefile | 2 +
nss/nss_files/files-alias.c | 10 +++++
nss/tst-nss-files-alias-truncated.c | 66 +++++++++++++++++++++++++++++++++++
support/namespace.h | 2 +
support/support_chroot.c | 2 +
6 files changed, 98 insertions(+), 0 deletions(-)
create mode 100644 nss/tst-nss-files-alias-truncated.c
--
You are receiving this mail because:
You are on the CC list for the bug.
More information about the Glibc-bugs
mailing list