[PATCH] glob: Avoid copying the d_name field of struct dirent [BZ #19779]
Florian Weimer
fweimer@redhat.com
Fri Apr 29 10:08:00 GMT 2016
On 04/01/2016 11:55 PM, Roland McGrath wrote:
>> I can remove the use of d_namlen as a separate patch, before the copy
>> avoidance. I did not realize it has implications on application
>> behavior at the time, for which I apologize. But now, I still think
>> it's a desirable improvement.
>
> That sounds great.
Now that the d_namlen change is in, here is a rebased version of the
CVE-2016-1234 fix.
This version keeps the d_ino-guided skipping.
Tested on x86_64 and i386.
Thanks,
Florian
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0001-CVE-2016-1234-glob-Do-not-copy-d_name-field-of-struc.patch
Type: text/x-patch
Size: 11964 bytes
Desc: not available
URL: <http://sourceware.org/pipermail/libc-alpha/attachments/20160429/efcc400d/attachment.bin>
More information about the Libc-alpha
mailing list