[Bug glob/33814] wordexp with WRDE_REUSE and WRDE_APPEND may return uninitialized memory

cvs-commit at gcc dot gnu.org sourceware-bugzilla@sourceware.org
Mon Mar 23 14:42:53 GMT 2026


https://sourceware.org/bugzilla/show_bug.cgi?id=33814

--- Comment #19 from Sourceware Commits <cvs-commit at gcc dot gnu.org> ---
The release/2.43/master branch has been updated by Florian Weimer
<fw@sourceware.org>:

https://sourceware.org/git/gitweb.cgi?p=glibc.git;h=2be6cf2e75d091f2aef606af4ddd876855b77abb

commit 2be6cf2e75d091f2aef606af4ddd876855b77abb
Author: Florian Weimer <fweimer@redhat.com>
Date:   Mon Jan 26 17:12:37 2026 +0100

    posix: Run tst-wordexp-reuse-mem test

    The test was not properly scheduled for execution with a Makefile
    dependency.

    Fixes commit 80cc58ea2de214f85b0a1d902a3b668ad2ecb302 ("posix: Reset
    wordexp_t fields with WRDE_REUSE (CVE-2025-15281 / BZ 33814").

    (cherry picked from commit bed2db02f3183e93f21d506786c5f884a1dec9e7)

-- 
You are receiving this mail because:
You are on the CC list for the bug.


More information about the Glibc-bugs mailing list