[Bug network/12926] getaddrinfo()/make_request() may spin forever

["carlos at redhat dot com" <sourceware-bugzilla at sourceware dot org>]

https://sourceware.org/bugzilla/show_bug.cgi?id=12926

--- Comment #14 from Carlos O'Donell <carlos at redhat dot com> ---
(In reply to Florian Weimer from comment #13)
> (In reply to Carlos O'Donell from comment #11)
> 
> > How can we assume all supported kernels from 2.6.32 and up are not
> > vulnerable? AFAIK glibc has to be defensive in this case.
> 
> We could probably make an exception here.  In general, I really dislike the
> idea of working around kernel security bugs, but this might be an exception.
> (Although there are likely corner cases the libc check won't cover.)

We can conditionlize the code on upstream kernel version with the fix, similar
to the way we conditionalize with interface availability and eventually remove
the code when the minimum kernel version is new enough.

I don't like it either, but it is a fact of developing on a library with a wide
range of supported kernel versions.

-- 
You are receiving this mail because:
You are on the CC list for the bug.