[pushed 2.35 00/13] Backport gaih_inet refactoring and CVE fix
Siddhesh Poyarekar
siddhesh@sourceware.org
Fri Sep 15 23:47:42 GMT 2023
Backport refactoring of gaih_inet to clean up allocations and fix
CVE-2023-4806.
Siddhesh Poyarekar (13):
nss: Sort tests and tests-container and put one test per line
gaih_inet: Simplify canon name resolution
getaddrinfo: Fix leak with AI_ALL [BZ #28852]
gaih_inet: Simplify service resolution
gaih_inet: make numeric lookup a separate routine
gaih_inet: Split simple gethostbyname into its own function
gaih_inet: Split nscd lookup code into its own function.
gaih_inet: separate nss lookup loop into its own function
gaih_inet: make gethosts into a function
gaih_inet: split loopback lookup into its own function
gaih_inet: Split result generation into its own function
gethosts: Return EAI_MEMORY on allocation failure
getaddrinfo: Fix use after free in getcanonname (CVE-2023-4806)
nss/Makefile | 56 +-
nss/nss_test_gai_hv2_canonname.c | 56 +
nss/tst-nss-gai-hv2-canonname.c | 63 +
nss/tst-nss-gai-hv2-canonname.h | 1 +
.../postclean.req | 0
.../tst-nss-gai-hv2-canonname.script | 2 +
sysdeps/posix/getaddrinfo.c | 1574 +++++++++--------
7 files changed, 977 insertions(+), 775 deletions(-)
create mode 100644 nss/nss_test_gai_hv2_canonname.c
create mode 100644 nss/tst-nss-gai-hv2-canonname.c
create mode 100644 nss/tst-nss-gai-hv2-canonname.h
create mode 100644 nss/tst-nss-gai-hv2-canonname.root/postclean.req
create mode 100644 nss/tst-nss-gai-hv2-canonname.root/tst-nss-gai-hv2-canonname.script
--
2.41.0
More information about the Libc-stable
mailing list