[Bug libc/27083] Unsafe unbounded alloca in addmntent

[siddhesh at sourceware dot org]

https://sourceware.org/bugzilla/show_bug.cgi?id=27083

Siddhesh Poyarekar <siddhesh at sourceware dot org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
   Target Milestone|---                         |2.33
         Resolution|---                         |FIXED
             Status|NEW                         |RESOLVED

--- Comment #3 from Siddhesh Poyarekar <siddhesh at sourceware dot org> ---
Fixed in master:

commit 9798906a426fc458b949271bcc9b8ad1608de867 (HEAD -> master)
Author: Siddhesh Poyarekar <siddhesh@sourceware.org>
Date:   Tue Dec 22 17:18:12 2020 +0530

    addmntent: Remove unbounded alloca usage from getmntent [BZ#27083]

    The addmntent function replicates elements of struct mnt on stack
    using alloca, which is unsafe.  Put characters directly into the
    stream, escaping them as they're being written out.

    Also add a test to check all escaped characters with addmntent and
    getmntent.

-- 
You are receiving this mail because:
You are on the CC list for the bug.