[PATCH v4] getcwd: Set errno to ERANGE for size == 1 (CVE-2021-3999)

Siddhesh Poyarekar siddhesh@sourceware.org
Fri Jan 21 18:02:06 GMT 2022


On 21/01/2022 23:29, Andreas Schwab wrote:
> On Jan 21 2022, Siddhesh Poyarekar via Libc-alpha wrote:
> 
>> +static int
>> +recv_fd (const int sock)
>> +{
>> +  struct msghdr msg;
>> +  union
>> +    {
>> +      struct cmsghdr hdr;
>> +      char buf[CMSG_SPACE(sizeof(int))];
>> +    } cmsgbuf;
> 
> Zero-init like in send_fd.
> 

Thanks, I missed that.  Sending v5.

Siddhesh


More information about the Libc-alpha mailing list