[PATCH] Error checking for SETXID (bug 13347)
Florian Weimer
fweimer@redhat.com
Mon Apr 28 09:03:00 GMT 2014
On 03/24/2014 03:30 PM, Florian Weimer wrote:
> Check for syscall error in the SETXID implementation in NPTL (bug 13347).
>
> At this point, we can only abort the process because we have already
> switched credentials on other threads. Returning an error would still
> leave the process in an inconsistent state.
>
> The new xtest needs root privileges to run.
It turns out that the patch is wrong/incomplete. The abort needs to be
restricted to cases where we actually see inconsistent failure/success
behavior. I will work on a fix.
--
Florian Weimer / Red Hat Product Security Team
More information about the Libc-alpha
mailing list