[Bug dynamic-link/26577] Stack overflow in dlopen

[fweimer at redhat dot com]

https://sourceware.org/bugzilla/show_bug.cgi?id=26577

Florian Weimer <fweimer at redhat dot com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |fweimer at redhat dot com
              Flags|                            |security-
          Component|libc                        |dynamic-link

--- Comment #1 from Florian Weimer <fweimer at redhat dot com> ---
This is caused by the alloca in dl-load.c during pathname construction. We
cannot trivially replace this with malloc because this allocation would leak
most of the time because of the way free works for the dl-minimal.c malloc.

I'm setting security- (no security impact) because the dlopen argument does not
cross a trust boundary.

-- 
Red Hat GmbH, https://de.redhat.com/ , Registered seat: Grasbrunn,
Commercial register: Amtsgericht Muenchen, HRB 153243,
Managing Directors: Charles Cachera, Brian Klemm, Laurie Krebs, Michael O'Neill

-- 
You are receiving this mail because:
You are on the CC list for the bug.