[PATCH] Fix stack overflow in getaddrinfo with many results

[Carlos O'Donell]

On 04/03/2013 08:57 AM, Andreas Schwab wrote:
> Since struct sort_results is rather big this can overflow the stack
> pretty fast.
> 
> Andreas.
> 
> 	[BZ #15330]
> 	* sysdeps/posix/getaddrinfo.c (getaddrinfo): Allocate results and
> 	order arrays from heap if bigger than alloca cutoff.

I don't see a CVE # for this yet, but the request is here:
http://www.openwall.com/lists/oss-security/2013/04/03/2

Could you please add the CVE# to the NEWS file when it gets one?
I think we want to clearly show in the NEWS that we fixed CVEs.

Could you also add CVE-2013-0242 to NEWS (already fixed by you
on Jan 29th)?

Cheers,
Carlos.