[Bug glob/33814] wordexp with WRDE_REUSE and WRDE_APPEND may return uninitialized memory

cvs-commit at gcc dot gnu.org sourceware-bugzilla@sourceware.org
Mon Mar 23 15:30:39 GMT 2026


https://sourceware.org/bugzilla/show_bug.cgi?id=33814

--- Comment #21 from Sourceware Commits <cvs-commit at gcc dot gnu.org> ---
The release/2.40/master branch has been updated by Florian Weimer
<fw@sourceware.org>:

https://sourceware.org/git/gitweb.cgi?p=glibc.git;h=d951a94c7da83c5e37489d3daf5bbbf0b0c0d19a

commit d951a94c7da83c5e37489d3daf5bbbf0b0c0d19a
Author: Florian Weimer <fweimer@redhat.com>
Date:   Mon Jan 26 17:12:37 2026 +0100

    posix: Run tst-wordexp-reuse-mem test

    The test was not properly scheduled for execution with a Makefile
    dependency.

    Fixes commit 80cc58ea2de214f85b0a1d902a3b668ad2ecb302 ("posix: Reset
    wordexp_t fields with WRDE_REUSE (CVE-2025-15281 / BZ 33814").

    (cherry picked from commit bed2db02f3183e93f21d506786c5f884a1dec9e7)

-- 
You are receiving this mail because:
You are on the CC list for the bug.


More information about the Glibc-bugs mailing list