[glibc-2.20] CVE-2015-1472: wscanf allocates too little memory

[Mike Frysinger]

i've backported this to the 2.20 branch
-mike

commit 4d54424420c6300efbf57a7b9aa8635a8b8c1942
Author: Paul Pluzhnikov <ppluzhnikov@google.com>
Date:   Fri Feb 6 00:30:42 2015 -0500

    CVE-2015-1472: wscanf allocates too little memory

    BZ #16618

    Under certain conditions wscanf can allocate too little memory for the
    to-be-scanned arguments and overflow the allocated buffer.  The
    implementation now correctly computes the required buffer size when
    using malloc.

    A regression test was added to tst-sscanf.

    (cherry picked from commit 5bd80bfe9ca0d955bfbbc002781bc7b01b6bcb06)

    Conflicts:
        ChangeLog
        NEWS
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 819 bytes
Desc: Digital signature
URL: <http://sourceware.org/pipermail/libc-stable/attachments/20150101/a3d04c47/attachment.sig>