[Bug dynamic-link/22606] Incorrect array size computation in _dl_init_paths (CVE-2017-1000408)

["cvs-commit at gcc dot gnu.org" <sourceware-bugzilla at sourceware dot org>]

https://sourceware.org/bugzilla/show_bug.cgi?id=22606

--- Comment #3 from cvs-commit at gcc dot gnu.org <cvs-commit at gcc dot gnu.org> ---
This is an automated email from the git hooks/post-receive script. It was
generated because a ref change was pushed to the repository containing
the project "GNU C Library master sources".

The branch, release/2.26/master has been updated
       via  633e2f7f3d88df6427aa3a7a984d3a6b796d9611 (commit)
       via  43b3cb59b2288953efc26e70fe7c6eb437513b1f (commit)
       via  bda48606ee93a29d9dfd8d797839a777344de5c8 (commit)
      from  5a2779f9bc829bdd804e68d54c14ec61d07d0295 (commit)

Those revisions listed above that are new to this repository have
not appeared on any other notification email; so we list those
revisions in full, below.

- Log -----------------------------------------------------------------
https://sourceware.org/git/gitweb.cgi?p=glibc.git;h=633e2f7f3d88df6427aa3a7a984d3a6b796d9611

commit 633e2f7f3d88df6427aa3a7a984d3a6b796d9611
Author: Florian Weimer <fweimer@redhat.com>
Date:   Thu Dec 14 15:05:57 2017 +0100

    elf: Count components of the expanded path in _dl_init_path [BZ #22607]

    (cherry picked from commit 3ff3dfa5af313a6ea33f3393916f30eece4f0171)

https://sourceware.org/git/gitweb.cgi?p=glibc.git;h=43b3cb59b2288953efc26e70fe7c6eb437513b1f

commit 43b3cb59b2288953efc26e70fe7c6eb437513b1f
Author: Florian Weimer <fweimer@redhat.com>
Date:   Thu Dec 14 15:18:38 2017 +0100

    elf: Compute correct array size in _dl_init_paths [BZ #22606]

    (cherry picked from commit 8a0b17e48b83e933960dfeb8fa08b259f03f310e)

https://sourceware.org/git/gitweb.cgi?p=glibc.git;h=bda48606ee93a29d9dfd8d797839a777344de5c8

commit bda48606ee93a29d9dfd8d797839a777344de5c8
Author: Florian Weimer <fweimer@redhat.com>
Date:   Thu Nov 2 12:14:01 2017 +0100

    <array_length.h>: New array_length and array_end macros

    (cherry picked from commit c94a5688fb1228a862b2d4a3f1239cdc0e3349e5)

-----------------------------------------------------------------------

Summary of changes:
 ChangeLog                                          |   20 ++++++++++++
 NEWS                                               |   11 +++++++
 elf/dl-load.c                                      |   27 +++++++----------
 .../array_length.h                                 |   32 ++++++++++---------
 4 files changed, 59 insertions(+), 31 deletions(-)
 copy malloc/alloc_buffer_copy_bytes.c => include/array_length.h (51%)

-- 
You are receiving this mail because:
You are on the CC list for the bug.