[Bug nss/28940] New: __nss_database_get doesn't check for allocation failure

[tavianator at tavianator dot com]

https://sourceware.org/bugzilla/show_bug.cgi?id=28940

            Bug ID: 28940
           Summary: __nss_database_get doesn't check for allocation
                    failure
           Product: glibc
           Version: 2.35
            Status: UNCONFIRMED
          Severity: normal
          Priority: P2
         Component: nss
          Assignee: unassigned at sourceware dot org
          Reporter: tavianator at tavianator dot com
  Target Milestone: ---

The implementation of __nss_database_get() is just

bool
__nss_database_get (enum nss_database db, nss_action_list *actions)
{
  struct nss_database_state *local = nss_database_state_get ();
  return nss_database_check_reload_and_get (local, actions, db);
}

But nss_database_state_get() can fail to allocate and return NULL.  When that
happens, nss_database_check_reload_and_get() dereferences the NULL pointer and
segfaults.

-- 
You are receiving this mail because:
You are on the CC list for the bug.