[pushed 2.35 00/13] Backport gaih_inet refactoring and CVE fix

Siddhesh Poyarekar siddhesh@sourceware.org
Fri Sep 15 23:47:42 GMT 2023


Backport refactoring of gaih_inet to clean up allocations and fix
CVE-2023-4806.

Siddhesh Poyarekar (13):
  nss: Sort tests and tests-container and put one test per line
  gaih_inet: Simplify canon name resolution
  getaddrinfo: Fix leak with AI_ALL [BZ #28852]
  gaih_inet: Simplify service resolution
  gaih_inet: make numeric lookup a separate routine
  gaih_inet: Split simple gethostbyname into its own function
  gaih_inet: Split nscd lookup code into its own function.
  gaih_inet: separate nss lookup loop into its own function
  gaih_inet: make gethosts into a function
  gaih_inet: split loopback lookup into its own function
  gaih_inet: Split result generation into its own function
  gethosts: Return EAI_MEMORY on allocation failure
  getaddrinfo: Fix use after free in getcanonname (CVE-2023-4806)

 nss/Makefile                                  |   56 +-
 nss/nss_test_gai_hv2_canonname.c              |   56 +
 nss/tst-nss-gai-hv2-canonname.c               |   63 +
 nss/tst-nss-gai-hv2-canonname.h               |    1 +
 .../postclean.req                             |    0
 .../tst-nss-gai-hv2-canonname.script          |    2 +
 sysdeps/posix/getaddrinfo.c                   | 1574 +++++++++--------
 7 files changed, 977 insertions(+), 775 deletions(-)
 create mode 100644 nss/nss_test_gai_hv2_canonname.c
 create mode 100644 nss/tst-nss-gai-hv2-canonname.c
 create mode 100644 nss/tst-nss-gai-hv2-canonname.h
 create mode 100644 nss/tst-nss-gai-hv2-canonname.root/postclean.req
 create mode 100644 nss/tst-nss-gai-hv2-canonname.root/tst-nss-gai-hv2-canonname.script

-- 
2.41.0



More information about the Libc-stable mailing list