[patch] Fix out-of-bounds access in _dl_show_auxv()

Paul Pluzhnikov ppluzhnikov@google.com
Fri Apr 27 22:43:00 GMT 2012


On Fri, Apr 27, 2012 at 3:15 PM, Marek Polacek <polacek@redhat.com> wrote:

>> In _dl_show_auxv(), when handling unknown a_type values, auxvars[] could
>> be accessed out of bounds and cause a crash.
>
> Would you have a testcase?

I do, but the testcase involves a custom kernel that passes in an unknown
to glibc a_type == AT_GOOGLE_..., which is large enough to cause a crash.

-- 
Paul Pluzhnikov



More information about the Libc-alpha mailing list