This is the mail archive of the
glibc-bugs@sourceware.org
mailing list for the glibc project.
[Bug nptl/13347] Threaded setuid() can wrongly report success when failing to drop privileges
- From: "cvs-commit at gcc dot gnu.org" <sourceware-bugzilla at sourceware dot org>
- To: glibc-bugs at sourceware dot org
- Date: Tue, 01 Apr 2014 10:13:50 +0000
- Subject: [Bug nptl/13347] Threaded setuid() can wrongly report success when failing to drop privileges
- Auto-submitted: auto-generated
- References: <bug-13347-131 at http dot sourceware dot org/bugzilla/>
https://sourceware.org/bugzilla/show_bug.cgi?id=13347
--- Comment #9 from cvs-commit at gcc dot gnu.org <cvs-commit at gcc dot gnu.org> ---
This is an automated email from the git hooks/post-receive script. It was
generated because a ref change was pushed to the repository containing
the project "GNU C Library master sources".
The branch, master has been updated
via 13f7fe35ae2b0ea55dc4b9628763aafdc8bdc30c (commit)
from c859b32e9d76afe8a3f20bb9528961a573c06937 (commit)
Those revisions listed above that are new to this repository have
not appeared on any other notification email; so we list those
revisions in full, below.
- Log -----------------------------------------------------------------
https://sourceware.org/git/gitweb.cgi?p=glibc.git;h=13f7fe35ae2b0ea55dc4b9628763aafdc8bdc30c
commit 13f7fe35ae2b0ea55dc4b9628763aafdc8bdc30c
Author: Florian Weimer <fweimer@redhat.com>
Date: Mon Mar 24 15:24:02 2014 +0100
Check for syscall error in the SETXID implementation in NPTL (bug 13347).
At this point, we can only abort the process because we have already
switched credentials on other threads. Returning an error would still
leave the process in an inconsistent state.
The new xtest needs root privileges to run.
-----------------------------------------------------------------------
Summary of changes:
ChangeLog | 7 +++
nptl/Makefile | 3 +-
nptl/nptl-init.c | 9 +++-
nptl/tst-setuid2.c | 145 ++++++++++++++++++++++++++++++++++++++++++++++++++++
4 files changed, 161 insertions(+), 3 deletions(-)
create mode 100644 nptl/tst-setuid2.c
--
You are receiving this mail because:
You are on the CC list for the bug.