[Bug glob/33814] wordexp with WRDE_REUSE and WRDE_APPEND may return uninitialized memory

cvs-commit at gcc dot gnu.org sourceware-bugzilla@sourceware.org
Mon Mar 30 19:50:27 GMT 2026


https://sourceware.org/bugzilla/show_bug.cgi?id=33814

--- Comment #25 from Sourceware Commits <cvs-commit at gcc dot gnu.org> ---
The release/2.36/master branch has been updated by Aurelien Jarno
<aurel32@sourceware.org>:

https://sourceware.org/git/gitweb.cgi?p=glibc.git;h=1dca88cfab6fa3fd87e961ff9fa9c6bc807993dd

commit 1dca88cfab6fa3fd87e961ff9fa9c6bc807993dd
Author: Florian Weimer <fweimer@redhat.com>
Date:   Mon Jan 26 17:12:37 2026 +0100

    posix: Run tst-wordexp-reuse-mem test

    The test was not properly scheduled for execution with a Makefile
    dependency.

    Fixes commit 80cc58ea2de214f85b0a1d902a3b668ad2ecb302 ("posix: Reset
    wordexp_t fields with WRDE_REUSE (CVE-2025-15281 / BZ 33814").

    (cherry picked from commit bed2db02f3183e93f21d506786c5f884a1dec9e7)

-- 
You are receiving this mail because:
You are on the CC list for the bug.


More information about the Glibc-bugs mailing list