[PATCH] CVE-2014-8121: Fix nss_files file management [BZ#18007]

Andreas Schwab schwab@suse.de
Wed Mar 25 13:05:00 GMT 2015


Florian Weimer <fw@deneb.enyo.de> writes:

> Maybe.  But we cannot remove the old API (there are external NSS
> modules, after all).  Therefore, such a change would only increase
> complexity.

There is no way around.

> Ahem, I think the commit message of my patch explains this quite
> clearly.  The code Ulrich added to deal with this corner case didn't
> work as intended because a flag was not set correctly.

Since it doesn't fix the bug, it doesn't make sense.

Andreas.

-- 
Andreas Schwab, SUSE Labs, schwab@suse.de
GPG Key fingerprint = 0196 BAD8 1CE9 1970 F4BE  1748 E4D4 88E3 0EEA B9D7
"And now for something completely different."



More information about the Libc-alpha mailing list