[Bug network/19787] New: Missing error checks in getnameinfo for AF_LOCAL

["fweimer at redhat dot com" <sourceware-bugzilla at sourceware dot org>]

https://sourceware.org/bugzilla/show_bug.cgi?id=19787

            Bug ID: 19787
           Summary: Missing error checks in getnameinfo for AF_LOCAL
           Product: glibc
           Version: 2.24
            Status: NEW
          Severity: normal
          Priority: P2
         Component: network
          Assignee: unassigned at sourceware dot org
          Reporter: fweimer at redhat dot com
  Target Milestone: ---
             Flags: security-

getnameinfo for the AF_LOCAL address family uses strncpy to copy the system
host name, not checking for truncation (or ensuring null termination).  The
error value from uname is not checked correctly.

Technically, this could lead to application crashes, but this functionality
appears rather obscure, so not treating this as a security issue.

-- 
You are receiving this mail because:
You are on the CC list for the bug.