sparc 32-bit dirent broken
David Miller
davem@davemloft.net
Thu Oct 10 19:17:00 GMT 2013
From: Florian Weimer <fweimer@redhat.com>
Date: Thu, 10 Oct 2013 21:09:24 +0200
> On 10/10/2013 09:05 PM, David Miller wrote:
>>
>> Commit:
>>
>> CVE-2013-4237, BZ #14699: Buffer overflow in readdir_r
>>
>> broke dirent on sparc.
>>
>> I suspect it has something to do with alignment. On 32-bit
>> sparc things must be aligned on a 64-bit boundary even though
>> "long" is only 32-bit. So that might have something to do
>> with the issue.
>
> Sorry about that. Can you post strace output showing the complete
> buffer that arrives from the kernel?
I'm currently testing simply putting that MIN() on reclen back,
I am almost certain that is going to fix things.
More information about the Libc-alpha
mailing list