1
0
mirror of https://sourceware.org/git/glibc.git synced 2025-08-21 22:22:50 +03:00
Files
glibc/sysdeps/unix/sysv/linux
Nikita Popov b805aebd42 librt: fix NULL pointer dereference (bug 28213)
Helper thread frees copied attribute on NOTIFY_REMOVED message
received from the OS kernel.  Unfortunately, it fails to check whether
copied attribute actually exists (data.attr != NULL).  This worked
earlier because free() checks passed pointer before actually
attempting to release corresponding memory.  But
__pthread_attr_destroy assumes pointer is not NULL.

So passing NULL pointer to __pthread_attr_destroy will result in
segmentation fault.  This scenario is possible if
notification->sigev_notify_attributes == NULL (which means default
thread attributes should be used).

Signed-off-by: Nikita Popov <npv1310@gmail.com>
Reviewed-by: Siddhesh Poyarekar <siddhesh@sourceware.org>
2021-08-09 20:17:34 +05:30
..
2021-07-21 11:58:16 +02:00
2021-06-22 12:09:52 -03:00
2021-06-22 12:09:52 -03:00
2021-03-18 15:54:39 -03:00
2021-03-26 13:36:17 -03:00
2021-07-21 11:58:16 +02:00
2021-03-26 13:37:14 -03:00
2021-06-22 12:09:52 -03:00
2021-06-22 12:09:52 -03:00
2021-07-21 11:58:16 +02:00
2021-03-26 13:37:18 -03:00
2021-03-26 13:37:18 -03:00
2021-03-26 13:37:18 -03:00
2021-03-26 13:37:18 -03:00
2021-07-21 11:58:16 +02:00
2021-03-26 13:36:17 -03:00
2021-07-21 11:58:16 +02:00
2021-03-29 10:22:13 -03:00
2021-07-08 14:08:13 -03:00
2021-03-26 13:36:17 -03:00
2021-05-03 08:15:53 +02:00
2021-05-17 20:55:21 +00:00
2021-06-15 10:42:11 -03:00
2021-07-08 14:08:13 -03:00
2021-06-15 10:42:11 -03:00
2021-07-21 11:58:16 +02:00
2021-06-15 10:42:11 -03:00
2021-06-22 12:09:52 -03:00
2021-06-22 12:09:52 -03:00