[PATCH] glob: Avoid copying the d_name field of struct dirent [BZ #19779]

Florian Weimer fweimer@redhat.com
Fri Apr 29 10:08:00 GMT 2016


On 04/01/2016 11:55 PM, Roland McGrath wrote:
>> I can remove the use of d_namlen as a separate patch, before the copy
>> avoidance.  I did not realize it has implications on application
>> behavior at the time, for which I apologize.  But now, I still think
>> it's a desirable improvement.
>
> That sounds great.

Now that the d_namlen change is in, here is a rebased version of the 
CVE-2016-1234 fix.

This version keeps the d_ino-guided skipping.

Tested on x86_64 and i386.

Thanks,
Florian
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0001-CVE-2016-1234-glob-Do-not-copy-d_name-field-of-struc.patch
Type: text/x-patch
Size: 11964 bytes
Desc: not available
URL: <http://sourceware.org/pipermail/libc-alpha/attachments/20160429/efcc400d/attachment.bin>


More information about the Libc-alpha mailing list