lib/glibc
lib/glibc
1
0
Fork 0
mirror of https://sourceware.org/git/glibc.git synced 2025-05-30 04:04:54 +03:00
Code

Fix confstr use of local buffer outside its extent.

Browse Source
This commit is contained in:
Roland McGrath 2012-03-25 11:36:35 -07:00
parent 6a9b9c02fa
commit ac4c54f0cc
2 changed files with 108 additions and 113 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
ChangeLog
View File

@ -1,3 +1,8 @@
2012-03-25 Roland McGrath <roland@hack.frob.com>
* posix/confstr.c (confstr): Lift RESTENVS definition to function scope.
Reported by Allan McRae <allan@archlinux.org>.
2012-03-23 Jeff Law <law@redhat.com> 2012-03-23 Jeff Law <law@redhat.com>
* nss/getnssent.c (__nss_getent): Fix typo. * nss/getnssent.c (__nss_getent): Fix typo.

18
posix/confstr.c
View File

@ -1,5 +1,4 @@
/* Copyright (C) 1991,1996,1997,2000-2004,2009,2010 Free /* Copyright (C) 1991-2012 Free Software Foundation, Inc.
Software Foundation, Inc.
This file is part of the GNU C Library. This file is part of the GNU C Library.
The GNU C Library is free software; you can redistribute it and/or The GNU C Library is free software; you can redistribute it and/or
@ -34,6 +33,9 @@ confstr (name, buf, len)
{ {
const char *string = ""; const char *string = "";
size_t string_len = 1; size_t string_len = 1;
char restenvs[4 * sizeof "POSIX_V7_LPBIG_OFFBIG"];
char restenvs[4 * sizeof "POSIX_V6_LPBIG_OFFBIG"];
char restenvs[4 * sizeof "XBS5_LPBIG_OFFBIG"];
switch (name) switch (name)
{ {
@ -53,9 +55,6 @@ confstr (name, buf, len)
wint_t types are no greater than the width of type long. wint_t types are no greater than the width of type long.
Currently this means all environment which the system allows. */ Currently this means all environment which the system allows. */
{
char restenvs[4 * sizeof "POSIX_V7_LPBIG_OFFBIG"];
string_len = 0; string_len = 0;
#ifndef _POSIX_V7_ILP32_OFF32 #ifndef _POSIX_V7_ILP32_OFF32
if (__sysconf (_SC_V7_ILP32_OFF32) > 0) if (__sysconf (_SC_V7_ILP32_OFF32) > 0)
@ -105,7 +104,6 @@ confstr (name, buf, len)
#endif #endif
restenvs[string_len++] = '\0'; restenvs[string_len++] = '\0';
string = restenvs; string = restenvs;
}
break; break;
case _CS_V6_WIDTH_RESTRICTED_ENVS: case _CS_V6_WIDTH_RESTRICTED_ENVS:
@ -116,9 +114,6 @@ confstr (name, buf, len)
wint_t types are no greater than the width of type long. wint_t types are no greater than the width of type long.
Currently this means all environment which the system allows. */ Currently this means all environment which the system allows. */
{
char restenvs[4 * sizeof "POSIX_V6_LPBIG_OFFBIG"];
string_len = 0; string_len = 0;
#ifndef _POSIX_V6_ILP32_OFF32 #ifndef _POSIX_V6_ILP32_OFF32
if (__sysconf (_SC_V6_ILP32_OFF32) > 0) if (__sysconf (_SC_V6_ILP32_OFF32) > 0)
@ -168,7 +163,6 @@ confstr (name, buf, len)
#endif #endif
restenvs[string_len++] = '\0'; restenvs[string_len++] = '\0';
string = restenvs; string = restenvs;
}
break; break;
case _CS_V5_WIDTH_RESTRICTED_ENVS: case _CS_V5_WIDTH_RESTRICTED_ENVS:
@ -179,9 +173,6 @@ confstr (name, buf, len)
wint_t types are no greater than the width of type long. wint_t types are no greater than the width of type long.
Currently this means all environment which the system allows. */ Currently this means all environment which the system allows. */
{
char restenvs[4 * sizeof "XBS5_LPBIG_OFFBIG"];
string_len = 0; string_len = 0;
#ifndef _XBS5_ILP32_OFF32 #ifndef _XBS5_ILP32_OFF32
if (__sysconf (_SC_XBS5_ILP32_OFF32) > 0) if (__sysconf (_SC_XBS5_ILP32_OFF32) > 0)
@ -231,7 +222,6 @@ confstr (name, buf, len)
#endif #endif
restenvs[string_len++] = '\0'; restenvs[string_len++] = '\0';
string = restenvs; string = restenvs;
}
break; break;
case _CS_XBS5_ILP32_OFF32_CFLAGS: case _CS_XBS5_ILP32_OFF32_CFLAGS: