sparc 32-bit dirent broken

David Miller davem@davemloft.net
Thu Oct 10 19:17:00 GMT 2013


From: Florian Weimer <fweimer@redhat.com>
Date: Thu, 10 Oct 2013 21:09:24 +0200

> On 10/10/2013 09:05 PM, David Miller wrote:
>>
>> Commit:
>>
>> CVE-2013-4237, BZ #14699: Buffer overflow in readdir_r
>>
>> broke dirent on sparc.
>>
>> I suspect it has something to do with alignment.  On 32-bit
>> sparc things must be aligned on a 64-bit boundary even though
>> "long" is only 32-bit.  So that might have something to do
>> with the issue.
> 
> Sorry about that.  Can you post strace output showing the complete
> buffer that arrives from the kernel?

I'm currently testing simply putting that MIN() on reclen back,
I am almost certain that is going to fix things.



More information about the Libc-alpha mailing list