[Bug stdio/17680] New: Unbounded alloca in vfprintf related to format specifiers (CVE-2012-3406)

["fweimer at redhat dot com" <sourceware-bugzilla at sourceware dot org>]

https://sourceware.org/bugzilla/show_bug.cgi?id=17680

            Bug ID: 17680
           Summary: Unbounded alloca in vfprintf related to format
                    specifiers (CVE-2012-3406)
           Product: glibc
           Version: 2.21
               URL: https://bugzilla.redhat.com/show_bug.cgi?id=826943
            Status: NEW
          Severity: normal
          Priority: P2
         Component: stdio
          Assignee: fweimer at redhat dot com
          Reporter: fweimer at redhat dot com
             Flags: security+

Created attachment 7997
  --> https://sourceware.org/bugzilla/attachment.cgi?id=7997&action=edit
glibc-rh841318.patch

A large number of format specifiers could result in a stack overflow in
vfprintf due to an unbounded alloca call.

I'm attaching the current Fedora version of the patch.  I will try to reduce
the size of the included test case before submitting it.

-- 
You are receiving this mail because:
You are on the CC list for the bug.